oacpl/OACPL/urls.py

import os

from django.conf import settings
from django.conf.urls import url
from django.contrib import admin
from django.contrib.auth.decorators import login_required
from django.views.static import serve

import main.views
import charter_members.views


@login_required
def protected_serve(request, path, document_root=None, show_indexes=False):
    return serve(request, path, document_root, show_indexes)

urlpatterns = [
    url(r'^$', main.views.index, name='home'),
    url(r'^admin/', admin.site.urls, name='admin'),
    url(r'^attorney/(?P<userId>\d+)', charter_members.views.index, name='attorney'),
    url(r'^media/secure/(?P<path>.*)$', protected_serve, {'document_root': os.path.join(settings.MEDIA_ROOT, 'secure')}, name='secure media'),
    url(r'^media/(?P<path>.*)$', serve, {'document_root': settings.MEDIA_ROOT}, name='media')
]