Maybe I'm missing something, but it seems that "secure" files aren't really that secure. I'm using DNN 4.8.1 with the Documents 03.01.06 module. Here's what I'm doing:

1. Use File Manager to add a secure folder (either File System or Database) for a certain role.
2. Upload a file to this folder.
3. Add this document to a Documents module.
4. Log on as someone with rights to this document.
5. Visit the Documents module and get the URL of the secure document.
6. Give this URL to someone else on another computer.
7. This other user can download the "secure" file without logging into the DNN site.

Is this way security is supposed to work?

I can see that visitors to my site won't see the file in the Documents module, but anyone could post a link and circumvent the security. I understand that this isn't much different than a malicious user downloading the file and posting it elsewhere on the net, but I still would prefer that at least the link provide some security.

Can anyone else verify / duplicate this problem? Perhaps I'm just doing something wrong.