Hi Daniel,
I am having the same problem. I did as you suggested and restricted access within the media file itself to a specific user role type. However, the file is still visible and downloadable to anyone who has the URL.
Can you recommend a way to make sure that certain files are accessible only by registered users?
Thanks,
Max