I would like to password protect Drupal pages (solved) and media files related to these pages (solved, but not optimally). Currently the Drupal pages are secured via Drupal and the media files via htaccess. The problem with this is the users then have to authenticate twice to get to the media content. I've been told that the way to solve this is to create a role and restrict access to both Drupal pages and media using Private files download permission module.
I'm quite new to Drupal and am wondering if this is the normal way that people solve this problem; or is another method better/more common/etc..