Ability to access files you shall not be able to access

[Mineblame16]

Please confirm the following.

• I checked the existing issues for duplicate problems
• I have tried resolving the issue using the support portal

Describe the bug

While waiting for moderation you can download your own project (thats normal) but any unauthenticated user / not project owner is able to download it too, the solution would be to guard the download endpoint with ownership and role checking.
This is a minor issue but could contribute to an exploit.

Steps to reproduce

1. Get the url of unmoderated project download
2. Use incognito mode to erase tokens
3. access the url

Expected behavior

The user shall not be able to download the file since it is unmoderated

Additional context

No response