How to organize secure distributed access to files?

Question

CRM

Dear colleagues!
The company has the following task:
One person stores files (documents, pictures, etc.) locally on his computer in a certain directory structure. It is necessary to flexibly and securely set up access to individual folders and files via the Internet for individual people so that they can edit documents, and he can see all the changes. That is, they have selective data, each has his own, he has a complete picture of everything.
Confidentiality requirements are high. That is, public cloud services, such as google drive, dropbox are not suitable. Owncloud, crm and erp systems, svn came to mind.
Any advice on what would be best for this?

Answer 1

bittorrent sync

Answer 2

There was a similar situation. Made it even easier.
We deployed owncloud on our server and made a group there. Managers, administrators, etc. the manager could only edit his own file. Any administrator. But accordingly it's all set there. Very comfortably!

Answer 3

I support mace-ftl encryption they have implemented at the protocol level, access can be flexibly changed, read this, this with a change, deleted to the trash, etc. Changes are reflected very quickly, can be read almost instantly. At the same time, several people will not be able to change 1 file naturally.

Answer 4

the simplest has already been advised by BT Sync. A distributed torrent network from its points, a free limit of 10 almost dimensionless directories. (PS requirements have changed, the number is now unlimited, but in the free version you need to add them manually on each device).
https://www.getsync.com/intl/ru/
Another option is to use MEGA and share directories with each other, although they have it in the cloud, everything is stored and transmitted in encrypted form. https://mega.co.nz/

Answer 5

https + mod_dav_svn. Authorization is configured through a special file, with a very simple syntax.

[groups]
stat_admin=user3
report_admin=user4

[Production:/Statistic]
@stat_admin=rw
user1=r
*=

[Production:/Directors]
user2=rw
*=

[Production:/Reports]
@report_admin=rw
*=

It is also possible to set permissions for individual files, not just folders. Unfortunately, the solution is not without flaws.
1. You need to install the svn client. And it should be borne in mind that there is no normal free svn client on MacOS.
2. If the folder structure is very large and often there is a need to edit the rights, then the support of such a system will be "not convenient".
owncloud/seafile, as for me, is overkill for such a task. Although if you take it with a perspective on the future, you can look in their direction. There is no point in using git for this task, there will be only inconvenience.