read / modify Permission for user / company / all, seperately
As title, if this "controlled permission" can be implemented: user: Get read and modify permission immediately when file is created. company: people in the same company with the user, may get read but not modify permission all: other users, can't ...