[SOLVED] External shortcuts shown to users not allowed to see them

I created some public attachments "links" on a project "My Project" (not administrative, regular project) with my account A in Team A.
User B from Team B has no access to My Project (not even read) but he can see these links in external shortcuts area (on bottom left). If he has no access to My Project, why would he see these links, even if public?

So I tried to change privacy of links from Public to Team only, but it changed nothing.

Thank you in advance,