I'm just logging this here before I forget.
In order to GET a file that I created via POST (with my UID) I need to have the Bypass file access control permission. No other combination seems to work except user 1.
*:Download any files should be enough I'd've thought.