We've got a set of documents and need to restrict read access to them for various groups of users - Group A needs to see all, Group B can see only a subset and Group C can see a different subset (with some overlap) than Group B.
We don't want to get into document level security for these hundreds of documents.
We will need a works-in-progress (WIP) document library to hold pre-approved updates of these documents (and a fourth Group D will need read/write permissions there) and we were wondering if a workflow initiated in the WIP document library can be set up to place a copy of an approved document into a Group A document library, a copy into the Group B document library and a copy into the Group C document library (as appropriate).
Even if a workflow can do that, it might take three separate workflows (1. Copy to Group A document library, 2. Copy to Group A and Group B document libraries, and 3. Copy to Group A and Group C libraries) - or maybe there is a way a single workflow could be conditionally directed by some input made by the person who triggers the workflow?
Another possibility - but one that seemed less likely to be feasible - would be to have the workflow set the document-level permissions of the approved document before placing it in a single document library that all user groups could access.
Any insights would be most appreciated!
James
