I'd like to keep someone from downloading a file unless they logged in. I don't want them to save the URL to the file and give it to their friends. I don't want to do an NT challage response. So I guess I could restrict the file to certain users of the server. So how could someone log-in though a webpage and receive enough permissions to be able to download the file?