diff --git a/mod_regression/controllers.py b/mod_regression/controllers.py
index 0b768084..e7ee48a0 100644
--- a/mod_regression/controllers.py
+++ b/mod_regression/controllers.py
@@ -203,6 +203,7 @@ def toggle_active_status(regression_id):
 
 
 @mod_regression.route('/test/<regression_test_output_id>/download', methods=['GET'])
+@login_required
 def test_result_file(regression_test_output_id):
     """View the output files of the regression test."""
     rto = RegressionTestOutput.query.filter(RegressionTestOutput.id == regression_test_output_id).first()
@@ -213,6 +214,7 @@ def test_result_file(regression_test_output_id):
 
 
 @mod_regression.route('/test/<regression_test_output_id>/download/variant', methods=['GET'])
+@login_required
 def multiple_test_result_file(regression_test_output_id):
     """View the output files of the regression test (variants)."""
     rtof = RegressionTestOutputFiles.query.filter(RegressionTestOutputFiles.id == regression_test_output_id).first()
diff --git a/mod_sample/controllers.py b/mod_sample/controllers.py
index d8f64fa5..5d315f5c 100755
--- a/mod_sample/controllers.py
+++ b/mod_sample/controllers.py
@@ -173,6 +173,7 @@ def sample_by_hash(sample_hash):
 
 
 @mod_sample.route('/download/<sample_id>')
+@login_required
 def download_sample(sample_id):
     """
     Download sample file.
@@ -190,6 +191,7 @@ def download_sample(sample_id):
 
 
 @mod_sample.route('/download/<sample_id>/media-info')
+@login_required
 def download_sample_media_info(sample_id):
     """
     Download sample file's media information as XML.
@@ -216,6 +218,7 @@ def download_sample_media_info(sample_id):
 
 
 @mod_sample.route('/download/<sample_id>/additional/<additional_id>')
+@login_required
 def download_sample_additional(sample_id, additional_id):
     """
     Download sample file's additional files and information.
diff --git a/mod_test/controllers.py b/mod_test/controllers.py
index 619f6323..ba412ef1 100644
--- a/mod_test/controllers.py
+++ b/mod_test/controllers.py
@@ -371,6 +371,7 @@ def generate_diff(test_id: int, regression_test_id: int, output_id: int, to_view
 
 
 @mod_test.route('/log-files/<test_id>')
+@login_required
 def download_build_log_file(test_id):
     """
     Serve download of build log.