Handling confidential files

[eluser]Mike Ryan[/eluser]
As long as your authentication/authorisation systems are reliable then yes, this system will prevent users from accessing files owned by other users. If you are not already doing so, you may want to consider using database sessions to help prevent user impersonation.

Encrypting the file and/or storing it in the DB will help protect against local users viewing the files, if that is a consideration.