The download restriction works great Bo, but how can I protect the daapd server. As my setup is now, fireplay.html is protected on a web server and a user has to enter their LDAP username and password to get access. But if someone set up fireplay on their own web server, they can direct it to the ip and port my daapd (firefly) server is running on, and download any song they want. I don´t think it´s possible to add LDAP authentication to firefly so the only solution that I see is to add a password to firefly and make fireplay connect with that password automatically. Is that possible or is there an easier solution?