Hi friends,
I uploaded a file as private, but I am still able to download it through URL even without login into any account.
Am I missing something or this is a bug?
Yes that may reflect a security bug for example this recent discussion Encryption key is invalid, Please check site_config.json on restore - #15 by clarkej
Others may want to weigh in here?
Thanks for coming down to this post. I am wondering that do we two only are having this problem… 
Can anybody please help regarding this issue?
On version 12 I checked this and it is working properly. You canot access private file without permission.
Isn’t it caused because you are in a local instance?
No. I checked on server too. 
It is working.