If your organization enables the enrollment security config variable, users with the role permission Access Course Files When Enrollment Security is Enabled can access Manage Files to view and download course files.
If you want to hide specific course files from users, you can store those files in protected folders using folder names that begin with a dot (for example, “.personal_notes”). You can also rename existing folders to protect them. Protected folders are only accessible to users with the See File Listing role permission.
Apply content permissions on folders
Create a folder, or edit an existing folder and add a period at the start of its name (for example, “.personal_notes”).