Hey @Jici thanks for the answer, unfortunately it is still giving me error. It’s not clear where do I have to make the API call to. I assumed that it was an OBJ call.
When you set a file private (true), you can attach it to a thing (attach_to, unique ID of the item) and privacy rules will apply to this file. So user need to be logged in to have access to the file.