Rights are not checked when attachments are downloaded through downloadrev

If you manage to guess an attachment name and the revision you wish to download from a protected document, you can download it with the downloadrev action.