@avivey, thanks for pointing that out, I was trying via https 'credential helper' but I'll give that a try.

@chad I'll reiterate, Google, Amazon and Microsoft now offer their own cloud based git repositories. So its a fair shout that in future a fair proportion of private repos will be hosted with 1 of those companies.

I've also now tested it with Visual Studio Online - https://www.visualstudio.com/en-us/version-control-vs
and that works with normal credentials once you have created a 'Personal Access Token' via their GUI.

I just noticed the problem doesn't occur if you log in and then log out. you can still see the images correctly
But you can make it occur by deleting your phabricator.com cookie.

To make sure I understand, if I reiterate.
You need to make the file related to the Task to make it appear with the same permissions as the Task?

Is it possible to get D9307: Add note to daemon documention page about running as daemon user committed? as this would certainly go a long way to help new users (like me) understand that even though the phd.user is described as 'Specify a system user to run the daemons as.' it doesn't currently mean that the users will now automatically run as that user.

But does beg the question why phd.user is described as 'System user to run daemons as' if you have to run them yourself?