Upload files into a private directory. Enhances the core upload module's functionality to support both public and private uploads at the same time.
This module adds a "private" checkbox to the normal upload form. Files marked private will go to a separate directory. Access to files in this directory are controlled as if the entire site had private downloads, which is to say the user must have "view uploaded files" permission, and permission to view the node that the file is attached to.
The Drupal 6 version is now available. Drupal 6 allows the same file to be attached to multiple nodes, and entirely removes the node-level access control for files. This module restores node-level access control, using the rule that a user can see a file marked private, if-and-only-if they have view access to at least one of the nodes that the file is attached to.
Migrating private files from D5 to D6 should happen automatically (fingers crossed).