I would suggest using Access Control List (set in the Policy Administration Utility). You can set various permissions (Read, Download...) levels by Object Type, State, and any of in order of preference Role (Context Team), Group, Organization, User.
↧