Restrict access to PDF file?

Is there a way to allow all users to see a record, but only users with certain approved access to actually download an attached PDF?