Hello, is there any security for specific assets, not the folder please. Because the example link I gave earlier is still accessible directly in an external browser with no session set even after doing all that you have suggested
you could just encapsulate the specific fusebox action in the file “tomcat\webapps\razuna\global\host\dam\controller\circuit.xml.cfm” with a check for being logged in or not:
<fuseaction name="xy">
<if condition="#session.login# EQ 'T'">
<true>
original block goes here
</true>
<false>
<do action="login" />
</false>
</if>