File Download Security Issue

I am using backendless to store files. I have eliminated access to Guest and Not Authenticated users to be able to download files as these files are private.

When I login my test account with the user api, I get a token. I use the api to check if the token is valid and it comes back true. I use the API to check the roles assigned to this token and it comes back as Authenticated User and RestUser.

I use this same token to try to download a file under the Client_Uploads section (the only file in there called FileID.pdf a few folders deep) and it gives me the following in Postman:

“code”: 4000,
“message”: “User has no permissions for specified resource”,
“errorData”: {}

Can you please tell me why this is happening and how I can upload files and then only let authorized people download them via api from an external app? Application ID: E286204C-BEB7-2DB1-FF52-A948E59CAF00

Could you please attach a screenshot from Postman showing how you configured HTTP request headers?