Only block access to attachment pages that are listed as downloadable product files. Props @spencerfinnell Closes #1523