# Chat attachments are private. They are served by pos-backend/api/chat.php,
# which checks that the person asking is party to the conversation. Direct
# access is denied so a leaked URL is not enough to read a file.
<IfModule mod_authz_core.c>
  Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
  Order allow,deny
  Deny from all
</IfModule>
