One of my recent tasks was a Drupal Commerce Shop that had to export .csv files (generated by Views, triggered by Rules) and save them as unmanaged files in a private directory. The folks these files were addressed to could not fetch them programmatically due to a lack of permission, so I had to alter the standard permissions that Drupal set.