you would probably want to take a look at the Apache Directory handler
<Directory /path/to/folder>
Options -Indexes
Order deny, allow
Deny from all
</Directory>
And you would want to include some additional authorisation to allow logged in users to browse the directory contents.