If you're doing that in a plugin, you should implement the function MYPLUGIN_pluginfile(...) in your plugin's lib.php, and control access there.
See https://docs.moodle.org/dev/File_API#Serving_files_to_users
General developer forum
overriding functions in lib/filelib.php
This discussion has been locked so you can no longer reply to it.