In version 2.0, which should aim to support Symfony 2.8 and 3.x, the FileController has to be updated to take the SecurityContext into account.