Each user should have personal storage area on NAS. It should be organized in three groups.

Personal files - User has full permissions, members of the user's group have read-only permissions and everyone else should have no access.

Private files - User has full permissions, group members and everyone should have no access.

Public files - User has full permissions. Everyone else should have read-only permissions.