Added access control validation on getDownloadUrlAction.