Insecure Direct Object Reference in Private File Uploads

Mohit Agherarequested to merge
issue/drupal-3593472:3593472-insecure-direct-object-reference-in-private-file into main

Initial fix and test changes.

Tests WIP

Closes #3593472

Merge request reports