[support] Drupal 7 public files

[Roger]

For years we have had /files as chmod 777 and must have apache as the 
group access which to my mind is dangerous.
We never permit public to input images or files. Only specific people 
with appropriate permissions and roles can upload images and pdf documents.
ckEditor and IMCE baulks if permissions and ownership are not open to 
everyone.
Is there a way to make all the /files images and documents private, 
permitting only approved people input?
thanks
Roger