Files and data access are under provisioning. Functions are under provisioning.
This means that access is granted when the issuing requests are matching, while requests are tied to a user, a web service or a app. Boxary will not disclose the link to the file or data gathering function if the request does not have (read: match) the rights (permission) to follow it. So no user, service or app will disclose the provisioned object. Files are resources, templates, style sheets, images, media, content. The owner of the respective objects is in control of the provisioning on a per-object basis, see Security.
Boxaries