Joel,

Sunil's answer is not really the "safe" way, because once the link to the file is known, anyone can download it bypassing DNNs security (e.g. by http://www.mydomain.com/Portals/0/Documents/MyUnSecureFile.pdf).

You should at least create a "Secure" folder using the file manager, which basically adds a ".resources" Extension to the file. So the link to it would be something like http://www.mydomain.com/Portals/0/SecureDocuments/MySecureFile.pdf.resources.

Anyway: you can download this as well by knowing the link, and removing the ".resources" part makes the file readable. In my eyes, the best solution would be to create a "Database" folder, then the file would be stored in the database and you need a file handler (LinkClick.aspx) to download it - there is no way to bypass DNN's security mechanisms. Fortunately, if you set a link to this file, it will automatically add this file handler link, so you do not have to take care about the syntax.

I every case you have to set the appropriate folder permissions as well.

Best wishes
Michael