According to Codex we can perform
current_user_can checks for certain
post_ID, but I fail to find any bit of info how to set a capability explicitly for that
A follow up question - how to set custom capability (for ex.
download_doc) of the same type that could be later checked by
current_user_can( "download_doc", get_the_ID() );