In DSpace (any version), there is not yet a way to restrict actions on PDFs. That would require an embedded/integrated PDF viewer, so that users can see the PDF, but cannot download, print or copy it. There is a ticket about this feature, but we've not yet found a volunteer to work on it:
https://github.com/DSpace/DSpace/issues/9488In the meantime, the only way (that I'm aware of) to make these restrictions would be to access restrict the bitstream (file) itself, so that no one could view/download the file (unless they are logged in with necessary privileges). To restrict a bitstream, you'd need to modify it's authorizations similar to the documentation here:
https://wiki.lyrasis.org/pages/viewpage.action?pageId=249135668 (This page shows an example for restricting an entire Item, but the same concept works for bitstreams/files.)