when i try to test my attached file download,i see that i can use link of download like this 

http://localhost:8069/web/content/373?download=true to download other file by changing onlythe number 373 to another one,please can we prevent this?