How to make content private and only for certain roles to see
There are a couple options (and more, I'm sure):

http://drupal.org/project/nodeaccess (easier to set up, but more manually intensive for the end user)

or

http://drupal.org/project/taxonomy_access (a little bit more to set up, but easier on ur end users)