On top of the required permissions, reading a file attached to a workspace is allowed only if:

• The user is a collaborator of the workspace, or
• The user is a platform admin, or
• The file has is_public=True. The file content hash must be unique per workspace.

Required permissions

• read files

Optional permissions

• read workspaces To access the workspace a file is attached to

• read user To access the file creator information