Today I checked little bit functionality of such CMS and I have one question - how is it possible to restrict asset downloading only for authenticated users? currently as I see I can have asset link which is static and can be used by anybody.
Right now it is not possible, but who should find out the very long random Ids of your assets? It is as good as having a unique password for every asset I would say.
Unfortunately it’s one of the requirement of the security team so I can’t negotiate it in this way…