Limit Access Rights to download a file in ASP.NET

If you want to keep a downloadable file private to end users / customers with their username and password, everyone suggests not to put the file in the web root directory, and gives you a suggestion to change IIS settings and use Response.TransmitFile. When you are not having access to the...