Attachment accessible through URL

Attachment accessible through URL

Hi, while testing some url's i noticed that via the url /workorder/FileDownload.jsp?module=Request&ID= the attachment for any given ID is available for download by non registered users (aka for the world to see).
 
Is this a bug or did i miss something in the configuration?

Vesion: 7.9.0
Build: 7902





                New to ADSelfService Plus?