Béla,

sorry, I think you can't have both, because a secure folder works the way I described above. The trick is you cannot download http://www.mysite.com/Portals/0/documents/mySecretDocument.pdf.resources, because the ".resources" extension is not an allowed file type to deliver (see IIS request filter settings). Therefore you need a handler that reads it and writes the content of the file to a memory stream - and this process uses the amount of memory that the file size is.

What you can do of course is giving them FTP access and store the files on an FTP server without anonymous access.

Best wishes
Michael

---