Respect permission handling when accessing cached files (e.g. thumbnails)
Currently we are still delivering the content of /var/lib/media/CACHE/
directly via nginx. Thus we do not reject requests for internal (cached) files.
See the related issue #769.
We should try to verify the permission for accessing a cached item (maybe based on a part of its path?) and serve the file via Django.