S3 ACLs

When I set an object to Public Read only in a non-public bucket I get a different result. When I click object’s URL, it opens up the document in separate tab and when I click ‘Open’ too it displays the contents of the file.