design - Can a URL really be considered to be the only key for an HTTP response? -

The question can be seen as both practical and theoretical.

I have a HTTP client (Flash Player application) and an HTTP server "backend" registered users with each personal image library can be uploaded and retrieved later.

Since users are certified with cookies carrying session identifiers, it became obvious to me (and therefore the question) that I can provide the following types of URLs to prove one note customer ( "assets") in my vocabulary to obtain image assets Aidentifairs are also unique to the user, ie, of the ID 555 in both Do not have assets. In addition, an asset identifier is actually considered permanently, i.e. ID is non-reusable, the URL I was thinking is:

  http: // myserver / User / asset / & lt; Asset_id & gt;  

The bracket variable denotes the value, that is, obviously and 'asset_id' is not to be taken literally here, they reflect the actual property identifier. In order to "request" the above URL, the user is expected to carry a cookie header with the session identifier, which specifically authenticates and authorizes the user as the owner of the requested asset.

I have a permanent URL (Tim Berners-Lee once said, "Cool URIs do not change"), but obviously, because asset resources are user's personalities who are uploads / owners, they Also not cached by the intermediate proxy, only user agent

Do we have a good way to assume the identity of the user properties to the above URL? My concern is that the response is a valid session identifier cookie header or not, and therefore no one-on-one relationship between a URL and response. But no one can do this, is not it? Server is authorized to receive a check that re-asset sender, is not it? If you have any better ideas for any solution, then I am also eager to hear it. Thank you.

You've said it all, I Bdlunga nothing about your strategy: -) If an unauthorized If the user tries to reach some assets, then give it only 403 HTP code ... that is the correct and expected response in that situation