How to protect files from public viewing?

Hello,

The site is protected by user verification. And users upload files that are not intended for public viewing. But despite the fact that I have security provider installed, if in the address bar of the browser to type the domain/directory/file_name.extension anyone can viewing or download this file. How to make viewing of these files available only to registered users?

Thanks in advance!