file access

dataset files are accessible from the MEDIA_URL

Expected Behavior

while user assets like profile pictures are expected to be served from that directory; dataset files must not

Current Behavior

when the filename of a dataset file is known, it can be downloaded from /media/datasets/filename

Steps to Reproduce

1. create a dataset
2. upload a file
3. download it from yourdomain.tld/media/datasets/filename

Additional Information

Possible Solution (optional)

Context (optional)

Detailed Description (optional)

Possible Implementation (optional)