The need is to create a double level private area only for registered users in an already existing wordpress website.
Level 1: contents and documents available for all the registered users.
Level 2: contents and documents available only for the single users. in this case documents containing sensitive data (such as payroll) will be loaded. The admin must have the possibility to upload the document and associate it with the individual user who will be the only one to have the visibility. Every time a user downloads a document, it is necessary keep track of this (log and email to the admin).
Self-registration by the user must not be possible, but the profile must only be created by the admin. At the time of creating the profile, the user must receive an email containing a link to change the password.
The user must be able to change the password whenever he wants, and to recover it if lost. The admin must have the possibility to reset the users password if necessary.