Yeah. For instance I can download a file as an anonymous user, as long as I have a link that is from a real purchase. Those links are ALWAYS attached to a uid, even if that uid is from an anonymous purchase (that is, if this were possible at the moment). But it boils down to being able to download the file whether or not you are logged in - the only thing necessary is a uc_file_users row that contains a link between the file's id (fid) and the file itself.

So I really think that somehow the $order object is being corrupted, whether it's a bug or "by design" at the moment... bug is more my guess and I get the feeling it's simply the order in which things are being called, but I could be wrong. Shawn seemed to be getting a handle on the issue.

Ryan and Lyle- what do you guys think of this?