External Training attachments Security

Summary

Can't view attachments in External training in order to approve.

Content

Hello -

When we first implemented Learn (2016) I was able to view attachments to External Training submissions. Then one of our teammates discovered that he could alter the attachment's URL and see a list of ALL external training attachments submitted in the Organization.

In altering the permissions to correct that issue, I (as Global Administrator) am now unable to view the attachments myself [This file is Secured. You cannot access it.] Now I must reach out to the submitter for the .pngs which is not only time-consuming but will likely raise issues when Audit time rolls around.