Accessing media and Policies

[stardothosting]

I have a policy as well as a resource index filter to control which user can see what resource item.

Because I want to control who can view a specific item within a Nova resource, I notice that there is no clear way to ensure that a user cannot just type any random download link ID to obtain access to the respective file.

For example, is it possible to include authorization / policy checks when a direct file access attempt is made such as :

http://site.local/nova-vendor/ebess/advanced-nova-media-library/download/6

It seems that any user can access any file this way.