# Files Stable file URLs that check access and redirect to a signed storage URL - [Redirect to a course's thumbnail](https://headless-lms.dev/docs/api/files/getCourseThumbnail): Any org user may fetch the thumbnail of a published course; staff may fetch any. 404 when the course has no thumbnail. - [Redirect to a download's thumbnail](https://headless-lms.dev/docs/api/files/getDownloadThumbnail): Any org user may fetch the thumbnail of a published download; staff may fetch any. 404 when the download has no thumbnail. - [Redirect to a community's thumbnail](https://headless-lms.dev/docs/api/files/getCommunityThumbnail): Any org user may fetch the thumbnail of a published community; staff may fetch any. 404 when the community has no thumbnail. - [Redirect to a file used in a lesson](https://headless-lms.dev/docs/api/files/getActivityFile): Served when the student can open the course, the course and the lesson are published, and the lesson lists the file. Staff may fetch any file a lesson lists. Use the URL as an img, video or audio src. - [Redirect to a file in a download, saved under its display name](https://headless-lms.dev/docs/api/files/getDownloadFile): Served when the student can open the download, it is published, and it lists the file. Staff may fetch any file a download lists. The storage link lives DELIVERY_URL_EXPIRY seconds. - [Redirect to a post's cover image](https://headless-lms.dev/docs/api/files/getPostCover): Served to whoever can read the post. 404 when the post has no cover. - [Redirect to an image attached to a chat message](https://headless-lms.dev/docs/api/files/getMessageAttachment): Served to the chat's participants while the message stands (staff also after it is deleted), and to moderators while the message is flagged. - [Redirect to an org user's profile photo](https://headless-lms.dev/docs/api/files/getPersonImage): Served to org users of the same organization when the photo belongs to it. 404 when the person has no photo here. - [Redirect to an image you uploaded](https://headless-lms.dev/docs/api/files/getMemberUploadFile): Served only to the person who uploaded it, once it is finalized.