diff --git a/app/Models/User.php b/app/Models/User.php
index 91e43006..75653ee1 100644
--- a/app/Models/User.php
+++ b/app/Models/User.php
@@ -257,7 +257,7 @@ class User extends Authenticatable
      */
     protected static function boot()
     {
-        parent::boot();
+        parent::booted();
 
         static::creating(function ($user) {
             $user->id = Str::uuid();
diff --git a/routes/file.php b/routes/file.php
index c90e6ee2..1326bfaa 100644
--- a/routes/file.php
+++ b/routes/file.php
@@ -6,7 +6,6 @@ use App\Http\Controllers\FileAccessController;
 Route::get('/avatars/{avatar}', [FileAccessController::class, 'get_avatar'])->name('avatar');
 Route::get('/system/{image}', [FileAccessController::class, 'get_system_image']);
 
-// TODO: testy
 // Get public thumbnails and files
 Route::get('/thumbnail/{name}/public/{token}', [FileAccessController::class, 'get_thumbnail_public']);
 Route::get('/file/{name}/public/{token}', [FileAccessController::class, 'get_file_public']);
diff --git a/tests/Feature/FileAccessTest.php b/tests/Feature/FileAccessTest.php
index 053fbb03..2e64de2d 100644
--- a/tests/Feature/FileAccessTest.php
+++ b/tests/Feature/FileAccessTest.php
@@ -3,6 +3,7 @@
 namespace Tests\Feature;
 
 use App\Models\File;
+use App\Models\Folder;
 use App\Models\User;
 use App\Models\Zip;
 use Carbon\Carbon;
@@ -267,4 +268,16 @@ class FileAccessTest extends TestCase
         $this->get("thumbnail/fake-thumbnail.jpg")
             ->assertRedirect();
     }
+
+    /**
+     * @test
+     */
+    public function guest_try_to_get_private_user_folder()
+    {
+        $folder = Folder::factory(Folder::class)
+            ->create();
+
+        $this->getJson("/api/browse/folders/$folder->id")
+            ->assertStatus(401);
+    }
 }