I am having a problem with a project I am working on at the minute.

Basically, I have a site set up with multiple levels of user access. This is all working fine, but there are a lot of files uploaded through the media plugin, which I want to protect from unauthorized users. The problem is, if the user knows the directory and name of a file, they can put that into the browser and the file will open (without authorization).
...