Access pdf links based on owner permission

Problem/Motivation

How can I prevent members from seeing a pdf link to another member's content?
Currently, any member with the "View PDF for...." permission can download this content via the entity pdf link, even if they do not have permission to view the content.
For example; any member with view permission can download other's invoice entities or any entity containing sensitive content such as invoices by changing the node IDs in the URL.

Any advice, please...Thanks.