I have started to create a module about restricting access to file attachments based on roles for nodes that are accessible by everyone.
The idea is there: http://drupal.org/node/147026