Version 1.28.0

Individual folders can now require their own capability, so a site with several membership tiers can keep each tier’s files closed to the others.

Only users who have it can open the files inside; everyone else is refused exactly as a logged-out visitor is.
The most specific folder decides: a rule on members/gold is applied ahead of one on members.
Folder rules only narrow access — they never admit someone who failed the site-wide capability — and share links keep working for the file they were issued for.
The settings screen reports which roles have each capability, and the file inspector names the rule a given file falls under.