you also have the option to only allow your application to have access in your file share and to serve files to outside simply read the bytes of the files and dump them to the client.