By default, WordPress leaves your uploaded files unprotected. That is, anyone can download your uploaded file if they know or guess the filename, even on a private page.
Protect your files today with MCM Protected File View Pro!
Not ready to buy? Try our free version. It doesn’t have file permissions per user role but has all other features that the pro version does. For instance, you may have two user roles but only want to give access to one of the user roles. In that case you’d need the pro version.