I just discovered that the URLs used for attachments appears to be public and accessible/downloadable without a login to airtable, even for tables that are not shared
For example, the following URL is to an attachment in an non-shared table, but is v...
Attachments URL are not protected, the URLs can be accessed by anyone who has the link. You can test this by uploading a test attachment, opening it, copying the URL, and pasting that URL into a signed-out (or incognito) browser. If the URL loads the...
