You can password protect a category and set viewing permission as you wish and same thing goes for upload permissions where you would want to set only that usergroup to post. Just make sure that user is the only user in that usergroup.
well it is how you would assign permissions in any forum or gallery product that I have ever seen. Permissions in products are handled by assigning usergroup permissions. If there is anything else I can assist with let me know.