I am working on a site with different types of access to the fileshare modules, but recently noticed that the fileshare/handler/nid were accessible to the world, even non-logged in users. Does anyone have an idea of why this is?