Store sensitive files

[Harald]

A general safety question.
When I upload a pdf file into documents.
Where is the file stored and how is it going to go external access protected?
Is it encrypted?

[tanya]

Any your file is saved in /data/upload/{attachmentId}
{attachmentId} - id column value in attachment table in database. Here contains all the information about this file.
related_entity_type = Document, related_entity_id={documentId} - shows, that attachment is related to your document

{espourl}/?entryPoint=download&id={attachmentId}

to download the file, the user has to be logged in and has to have access to this file