Yii2: limit display (return) of files depending on the role of the user?

Question

Yii

Actually a subject.
I put the file in the folder web/tickets/{ID}/file.jpg
How can I prevent this file from being viewed (even if the user has a direct link) if the file is not from the user that uploaded it?

Answer 1

Not to prohibit in any way, you need to remove the files from the web server directory (so that there are no direct links to them) and create a special handler that will read the file from the external directory and give its contents to the browser based on user rights.

Answer 2

Never forbid

Not true. There is an effective option - nginx and x-accel-redirect. See here: https://www.opennet.ru/base/net/nginx_x_accel_redi...
This is much more efficient than giving via php.