Private files

I’m having trouble making files hyperlinked on our webpages private, such that only users with CAS authentication can view them. These files were originally uploaded using CKFinder, but when I try to move the files to the “private” folder in CKFinder, reset the hyperlinks, save the page and then access the files through their respective hyperlinks, I get “permission denied”, with our without being logged in through CAS.