Yes a user can download a file from other user as long as the other user allowed the access of others otherwise, it is a private and will only be available to the owner/ uploader.