Use the "mindownloadlevel" setting.
mindownloadlevel - Minimum user level to be able download, 0 = disabled (hub restart recommended after change)