Skip to content

FB21784146: Inconsistent Access Control Logic on Legacy WWDC Video Downloads #760

@malhal

Description

@malhal

Submission Date

2026-01-28

Status

Open

Area

Developer Downloads

Operating System Version

macOS 26

Type

Incorrect/Unexpected Behavior

Description

I am reporting a logic inconsistency regarding access permissions for legacy WWDC video assets hosted on download.developer.apple.com.

When attempting to access a specific video URL (listed below), I am presented with an error message stating: "Your account can’t access this page... make sure your Account Holder has agreed to the latest license agreement."

However, I have observed a reversal of the intended logic:

1	The Issue: When my account is in a state where the latest license agreement has not yet been accepted, I am granted access to the video file and it downloads/plays successfully.

2	The Inconsistency: When the license agreement is accepted and the account is in good standing, the system triggers the "Your account can’t access this page" error.

This suggests a possible "negation" or logic error in the backend code responsible for verifying the Account Holder agreement status before serving protected content.
URL in Question:

https://download.developer.apple.com/videos/wwdc_2010__hd/session_145__key_event_handling_in_cocoa_applications.mov

Steps to Reproduce:

1	Log in to a Developer Account where the latest License Agreement has not been signed.

2	Navigate to the URL above. Observe that the file is accessible.

3	Log in to a Developer Account where all agreements are signed and up to date.

4	Navigate to the same URL. Observe the error: "Your account can’t access this page."

Expected Result: Access should be granted to active members who have accepted the latest agreements. Access should be restricted (or prompted for signature) for those who have not.

Actual Result: Access is denied to compliant accounts and granted to non-compliant accounts.

Keywords

No response

Prerequisites

  • The title follows the format FB<number>: <title>
  • I will keep this issue updated with Apple's responses

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions