Shared_with is probably not working as expected
The authentication predicate that is used to check access to files only tests for a shared user if the predicate is handed a calc_id. For some API endpoints (and other places?) no calc_id is given.
On Thursday, 7th July from 1 to 3 pm there will be a maintenance with a short downtime of GitLab.