Changing from public to private still allow to access file without access check

Hi,

When we change a file from public to private, the file can still be accessed direclty: the url "/sites/files/mydoc.txt" is still accessible thus bypassing the node access checks.

Thanks

Laurent