For a small number of users the first (Public read-only folder) can be done manually using Group Folders