Issue #2035329 by jweowu: Explicitly deny access to uploaded private files, if not permitting access.