I  have found that when someone has direct links they can access material as photo and video regardless of privacy settings in the system.

Having media files directly accessible can cause privacy and security issues.

Anyone know fix for this?

What i mean is that i publish a photo album in a group that has privacy settings to be viewed by group members only or upload an album with view privacy friends only still i can access that when being logged in but not being my friend for example if i have direct link to the media. That is really not optimal.

I have now tested more properly, problem seems to be with group and pages only- there people who are not group member can access media files via direct link even if view privacy set to group member only.

Yes, it is third party social https://socialnetworking.solutions/

But it has now been resolved.