Ensuring privacy of file upload area and uploaded files?

Is there a way in MODx to ensure the privacy of uploaded files?

It looks as though any user who has been granted access to the MODx file manager can see the entirety of the upload area and any file that has been uploaded to it (as from an OS perspective, it’s Apache looking at files owned by apache, and the MODx userid doesn’t seem to come into it, other than whether their role allows them access to the file manager or not).

I’d like the upload area to work in such a way that a user only has access to their own uploaded files (or those of their user group) unless granted broader permissions. This would mean that the user couldn’t sneakily see other files (intended to be private) when using the MODx file manager to upload files.

Similarly, for downloading/viewing files (once uploaded), the logged-in user should only be able to access uploaded files that they have been granted permission to access (or which are defined as accessible to all).

Is there a way to configure MODx to do this, or alternatively a snippet that would do this?

Thanks for any advice.

maybe this post can help you.

http://modxcms.com/forums/index.php/topic,22976.msg141495.html#msg141495