Attachment accessible thru URL

Attachment accessible thru URL

Hi, while testing some url's i noticed that via the url /workorder/FileDownload.jsp?module=Request&ID= the attachment for any given ID is available for download by non registered users (aka for the world to see).
 
Is this a bug or did i miss something in the configuration?


                  New to ADSelfService Plus?