Yup, I have mentioned that this area is underdocumented (ref: [ANN] SafeClient JS Client Library - #19 by cretz). I recommend making a JIRA issue asking them to make the distinctions between public/private and shared/non-shared explicitly clear. The files are encrypted too. If isPrivate is false, anyone can read it. isPathShared means that it can be used across apps.
1 Like