In my opinion this is the easiest way:
To avoid WRITE/READ permissions you can also use the EFile extension from @vknow360 instead of the File component:
WRITE/READ
EFile
File