Hi Malte,
Thanks for the help. So, how is this url permission done? Does it have anything to do with the request processor implementation for dotLRN? As the problem is getting much bigger than I tought, maybe I'll follow your suggestion and mount a file-storage folder wich will be public for everybody.