If you intend to use the PublishingFileRepository to store Web file asset data (items of type textFileAsset and binaryFileAsset), you can configure the security of these assets using the same general process as for items in any other VersionRepository. Simply keep in mind the custom security policy and folder hierarchy of the PublishingFileRepository as you do so.