Do you want to deny everyone but the owner the ability to download?
If so, you deny Download permission on WTDocuments to all principals except owner?
Or you can deny Download to a group/user/role.
If the logic of determining who should have download permission and who should not is more complicated then you will need to create a custom validator per MKR's suggestion.