diff --git a/src/routes/download.nim b/src/routes/download.nim
index fa279f6..3d6c854 100644
--- a/src/routes/download.nim
+++ b/src/routes/download.nim
@@ -19,7 +19,7 @@ proc createDownloadRoutes*() =
 
       var file = newFile()
       try:
-        db.select(file, """"File".name = $1""", H"Name")
+        db.select(file, """"File".name = $1 AND "File".owner = $2""", H"Name")
       except NotFoundError:
         resp Http404, "File does not exist.\n"