MLDS-296 Rest API should only allow approved affiliate users download access