Anyone can see media items

My site is http://www.lmeha.com.
If I google LMEHA, one page google suggests is in the Link above. This is a media item (a PDF). Anyone accessing the site should only go through the menu (and not be able to directly access a media item).

I set up a restriction, where only logged in users could see a Media, a Post, an Event or a Forum. (I have another restriction for Pages).

I thought this would stop non logged in users from accessing a PDF from the Media.
Unfortunately this doesn’t work! What am I doing wrong?

Thanks, Mike Cordy

The page I need help with: [log in to see the link]