I am going to start a project where I need to have certain files available to certain groups of web users. I know I can make documents only accessable to certain users, but is it somehow possible to restrict a file download to a certain group of users? I mean, if a user sees that all files are downloaded from http://whatever.com/assets/files/ he could simply start to guess filenames or make a script that tries a bunch of different filenames.
I’m not afraid of writing snippets but can’t think of a good solution to the problem.
