[LRUG] Photo gallery with access control

[Tom Armitage]

2008/4/25 Andrew Stewart <boss at airbladesoftware.com>:
>  You could save the images on the file system in a directory
>  unavailable to the public, i.e. not in your app's public/images.
>  Then you simply have a controller whose index and show actions send
>  the appropriate file(s) to the browser, if the user is permitted to
>  see that file(s).

Yeah, that sounds about right - use a controller just to grant access
to filesystem objects.