permission für videos

app/flask-postgres/app/app.py

@@ -408,8 +408,14 @@ def health():
 
 
 @app.route("/images/<path:filename>")
-def serve_image(filename):
+def images(filename):
-    return send_from_directory("/app/images", filename)
+
+    # 🔒 Schutz für Videos
+    if filename.startswith("videos/"):
+        if not session.get("user_id"):
+            return redirect(url_for("login", next=request.path))
+
+    return send_from_directory("images", filename)
 
 
 @app.route("/styles/<path:filename>")