We have sharepoint 2010 site which has windows and claims authentication. Framework is correctly authenticating users based on login and users who dont have access to site are receiving errors when try to access site. We have documents uploaded in the site and if someone who dont have access to the site knows the complete document URL link, they can open the document by directly browsing document link and authentitication is not happening here.
In some of the forums they suggested to implement custom HTTP handler to resolve the above issue.
Can anyone suggest us on any other solutions?