I am not sure if this is by design or not. We have a client that put together a application for employment style form and used the file upload widget to allow people to upload resumes. The notification that gets sent back has a link you can click to download the resume, but if you are not logged into Sitefinity you will receive the error "this type of page is not served". If you login and then try again it will work.
I can partially understand the original thinking behind this if it is intended to function this way, but the fact that you can now send these responses to a list of other emails that may not be Sitefinity users (i.e. Human Resources) is going to be problematic.
I would recommend to work with an expert to get detailed solution to your problem. You may consult a professional Sitefinity developer or agency. They may be able to help you resolve the issue.
IDS Logic (Sitefinity Development Agency)
I'm running Sitefinity 8.0 and am experiencing the same permissions issue.
However I do not see User Files under the Administration dropdown in the admin. Where do I need to go to set View Document permissions in 8.0?
EDIT: I've found this:
Administration > Permissions > Libraries > View Document & View Document Library
I've set both of these to "Everyone".
However, I still cannot open the file upload links unless I'm logged into the Sitefinity admin in that browser.
If we allow anonymous users to view the files attached in form responses, will the files be searchable on the web? The attached files may contain sensitive information (e.g. resume or personal particulars) .
Is there now a way with 10.1 or 10.2 to attach the uploaded resume file in the notification email instead of linking.