Search code examples
djangomediadjango-staticfilesdjango-media

Django hide media files link for certain people

I programmed a function where you can download a file from the media folder with the media files depending on the link. The problem is that if you change the path in the link you have access to all the media files and not just the ones you are supposed to download. Can I somehow ban the other links (with a permission or something) or is there a clever way to solve the whole thing?

Solution

  • I have now found a good solution.

    I now handle my files via a function called sendfile (https://github.com/johnsensible/django-sendfile) and send them to the user.

    This is used to access the media folder internally. I can simply switch off the Media Link in NGINX.