The unofficial WordPress Plugin Directory
Restrict media library access by user role — with activity logging, and REST API protection.