In my multitenant application. User can upload and download files uploaded by tenant user but any file uploaded by user not from tenant can’t be downloaded by tenant user.
The entity is not a tenant specific entity and extended form StandardEntity and no tenant_id filed. The files will be uploaded by master admin and should be available to all. Read only access is provided to this screen and entity to tenant user. I have extended file descriptor. (Is this the reason).
What other permission, I have to give to tenant user, so he can only download the file.