Jici
6
You access the fill attached to a thing the same way as you access a file not attached to a thing.
Consider this:
having the url into a field in a thing DOESN’T make it “attach” to a thing. So file are not secure even if the field is secure, the file url could be shared to anyone else and the file will not be private.
attachTo is only related to file privacy