Download of files must be consistent with node_access policy

With this fix, all files uploaded with a node are subject to the same permissions,
If a user cannot see the node, it cannot download the attached files.
Of course, for maximum security, download method must be set to 'private' .