# Deny direct web access to stored attachments: downloads must go through
# the permission-checked /attachment/{id} controller.
<IfModule mod_authz_core.c>
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
    Order deny,allow
    Deny from all
</IfModule>
