Private files are public after uploading as guest

ERPNext
1

Hi,

I have an application web form and want guests to upload files. If I upload files and mark them as private, they are still public accessible via the url, even if they are in the /private/files/ folder. In the file manager they are marked as private, but they are not.

This is a big issue for us.

If I upload files from the desk as a logged in user, it does work like it should (private files are private).

Is this a bug or is it not possible to upload private files as guests via web form?

Regards,
Stephan

2

Guest user is a default public website user… how you make a file uploaded by guest as a private file… you have to change the ownership of file through custom app after the upload