I found a previous (quite old) posting regarding this subject but the answer did not seem to be correct.
I have set up a User Account for a Friend, with a Password, but he told me that the Password was not asked for, and he could access and Download Files without it.
I tried this myself and found that he was correct.
I suspect I must have missed a setting somewhere, so any assistance would be very much appreciated.
Many Thanks.