None can actually access other's files directly, since they are on their local machines, not on server. One (User A) can only put a small request token (a request file with the File_Name they want and their home folder address) in the source(User B) folder. Since User B is listening to requests. It will upload the file to User A's folder.