How to tag files?

Hello

I want to tag automaticly files uploaded by users. As we have 4 category of files: CL1 (public) to CL4 (top secret), all files and folders should have per default CL4. This files should not be shared to anybody outside. If a user want to share such files, the user have to manualy switch the tag to a lower level.

How to do this?