Check authorization for media downloads
Currently media downloads (below /media/
) are delivered by the webserver, thus no authorization checks may be conducted.
Instead we should probably use something like django-downloadview and verify, whether the given content is accessible by the requester.