That’s what I also figured. The question was how could I integrate the permissions system of MongoDbl to the external storage.
I guess one way would be to make all of the files not publicly available, store the link in Parse, and every time a user requests a file, generate a signed url with an expiration of e.g. 1 hour to serve to the user?