Protect private post attachment file.