Using just the basic shortcode, meaning no attributes, will cause the main (top-level) file list to appear. Users can enter the Art folder, sub-folders of Art or any of the other folders displayed. Again, the appearance and functionality is defined by the plugin’s settings, not shortcode attributes.
This list is publicly viewable, but you can limit the visibility to only logged-in users. You can also use the WordPress “password protect” feature to limit access to a whole page.