Way To Protect Pdf Against Unatuthorized Users

Hi. On my site is generating pdf to every payout. File name is user’s id and payout count. How to block access users who aren’t owners? I think about adding salt to name, but If somebody will get link, it can see whose pdf. What is a way to hide file name or block access from users who aren’t owners?


instead of url of a pdf make it accessible by display in the browser directly