Four user roles:
System has automatic ‘Nanny functions’
Public visibility of documents is handled in the CMS