in reply to Restricting Access

At the risk of stating the very obvious thing here ... “that’s been done before.”   Why, then, are you building “Yet Another Online Document Management System?”