We uploaded a PDF using "File Manager" and assigned to "File Sets".
at File Sets, "View Files" permissions removed guest and added selected member only.

I added the link to content, the link as following:http://myweb/download_file/view/284/1431...
It work, public cannot view the file.

After click the link, the URL Address in browser show:
http://myweb/application/files/9652/2233/1202/test.pdf...

When I copy this link to others, they can view this file without login.

It is expected? I make any mistake? Can I protect the file completely?