diff --git a/app/controller/files.php b/app/controller/files.php
index 3014213f..320bc854 100644
--- a/app/controller/files.php
+++ b/app/controller/files.php
@@ -4,6 +4,14 @@
 
 class Files extends \Controller
 {
+    /**
+     * Require login to access files
+     */
+    public function __construct()
+    {
+        $this->_requireLogin();
+    }
+
     /**
      * Force the framework to use the local filesystem cache method if possible
      */