Mentions légales du service
Also we should return 401 if the user is unauthenticated and 403 if he is authenticated but not allowed to access the file.