Here I described how to realize such setups with the advanced permissions (ACL feature) of group folders: