It would be smart to be able to allow sharing based on a specific tag. Indicate in the roles that this tag is shared and authorized. while respecting the file structure.