User's Files aren't available even with a direct link.

Used a modified version of this technique: http://www.gyford.com/phil/writing/2012/09/26/django-s3-temporary.php The modification is that I access AWS via django-storage instead of boto directly.

Files are private when the are uploaded if you just go to a direct link you get an access denied message like this: https://s3-eu-west-1.amazonaws.com/devmedia.fundedbyme.com/mangopay_pages/JP_Licks_Oreo_Cake.JPG

But you can make a link that expires in 120 secs and view the link that way. Which is what I did.