Possible Duplicate:
How to Protect Uploads, if User is not Logged In?How to Protect Uploads, if User is not Logged In?
Is there any way at all to restrict direct access to files within a specific folder to only specific wordpress users that have that specific capability set?