r12041 unfortunately does _not_ fix this bug: Webservice clients simply "see" the public URL for attachments of private bugs, but they should see a URL containing the access token
r12041 unfortunately does _not_ fix this bug: Webservice clients simply "see" the public URL for attachments of private bugs, but they should see a URL containing the access token