I think it would be a good idea to implement role/group based permissions.
This would enable the administrator to grant different level of access to the users.
This can be useful in limiting who can see what shared resources.
just a thought.