If your organization enables the enrollment security configuration variable, users with the role permission Access Course Files When Enrollment Security is Enabled can access Manage Files to view and download course files.
If you want to hide specific course files from users, you can store those files in protected folders using folder names that begin with a dot (for example, “.personal_notes”). You can also rename existing folders to protect them. Protected folders are only available to users with the See File Listing role permission.