Fixed user can download their own files

src/utils/__init__.py

@@ -4,4 +4,5 @@ from .config import Config
 from .storage import storage
 from .md5stuffs import calculate_md5_sum_for_file, write_file_from_stream_to_file_like_while_calculating_md5
 from .exceptions import FileIntegrityError
-from .caff_previewer import create_caff_preview
+from .caff_previewer import create_caff_preview
+from .common_queries import user_can_access_caff

src/utils/common_queries.py

@@ -0,0 +1,15 @@
+from flask_security import current_user
+from models import db, Purchase, Item
+
+
+def user_can_access_caff(item: Item) -> bool:
+    if not current_user.is_authenticated:
+        return False
+    else:
+
+        if item.uploader == current_user:
+            return True
+        else:
+            p = Purchase.query.filter(
+                db.and_(Purchase.purchaser_id == current_user.id, Purchase.item_id == item.id)).first()
+            return bool(p)