How can I restrict access to folders and files using "File Server Action" in gen3?

Summary:

I have been using the "File Server Action" (FSA) in OIC Gen3.
I have found that there are no restrictions on access to the underlying file system.

I can create a user who has their SFTP access disabled but, using the FSA, they can access ANY file or folder on the file system.
This includes deleting, reading and creating.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Version:24.10.1

Code Snippet (add any code snippets that support your topic, if applicable):