How to add an exception to a role?

I need to give access to the media browser for user to upload files in the site, but if the user goes to mysite/media/browser they can see all the files, the public and private files.
So, how do I change the roles to let users use the Media Browser widget but not the page?

Thanks.