As far as I know, it's only possible to do that to a specific asset instance using the Advanced Role Based Access Control. Not by asset type.
"If Advanced Role Based Access Control is enabled in your configuration, then you can use Custom Access Settings to grant or deny permission to access individual assets and files."+
Edited by: manuel.rosa on 16/Jan/2013 2:41