I have an application web form and want guests to upload files. If I upload files and mark them as private, they are still public accessible via the url, even if they are in the /private/files/ folder. In the file manager they are marked as private, but they are not.
This is a big issue for us.
If I upload files from the desk as a logged in user, it does work like it should (private files are private).
Is this a bug or is it not possible to upload private files as guests via web form?