Pre-Sale Question (Security)

We currently have a WordPress site, which is going to be used as an online portal.

In this portal, we will create several logins, with a custom function to redirect a user to a page only they can access. In this page will be a number of PDF's (uploaded into the Media Library). A user will be forced to log in before they access a page, and redirected accordingly depending on which user logs in.

This means User A can ONLY access User-A page.

From here, we are going to be uploading documents for the user to download, meaning it will be private (As no other user can access it, and we use force login to make users login.)

Problem we have: If we upload a file to 'User-A', it still goes to /wp-content/uploads/user-a.pdf/, meaning 'User-B' could find this file if they get the URL. We need to be able to stop another user without access using the URL.

Would this plugin mean if User-A knew a URL for a media file in User-Bs file, it would decline access?

Thank you!