ASP.NET folder level security

Hello,

I have this application that will list up documents in a folder or provide links to them. A user will LOGIN and then be able to review reports that are associated with them. The issue is that if you know the internet address such as:

www.reports.com/reports/10002/report5.htm you can simply type that into a browser and see it. How or what would be some of the solutions to making it so only the logged in user in the app can see or load their reports and they in turn cannot view other peoples reports? Also at the same time keeping someone who just types in a URL out?


Thanks,

Mike ...