How Can I make sure a file can be downloaded only if the user is logged in? ( no forms authentication )

Question

I have some files I make available to the logged user to download, those ones can't be available if there is nobody logged in.

I check if the user is on of off by one session, Session["User"] for example

I am not using forms authentication.

any tips are valid, even you don't think it is the final solution, thanks

Answer 1

I would make the available using response/streaming instead a link to an actual file. Something as described here. Based on the logged user you can add it to the page, or not.