Confluence custom code - 3

We would like to develop a custom code for our Atlassian Confluence Server where users are restricted from downloading attachments on a selected space. We believe the velocity (vm) file must be customised. Please explain in brief how you would achieve this and your relevant experience on this type of project.