File access control rules not applied to image previews (NC-SA-2018-002)
A missing check for read permissions allowed users that received an incomming share containing files tagged so they should be denied access to still request a preview for those files...