    getDownloadUrl(fileId, accessToken) {
        return `${Shopware.Context.api.apiPath}/_action/${this.getApiBasePath()}/` +
            `file/download?fileId=${fileId}&accessToken=${accessToken}`;
    }
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.