user permissions

I've been trying to come up with a solid plan for moving forward with this file sharing portal for the company I work for.

I already have a skeleton in place that we use for sharing files with product dealers and collaborators, as well as receiving files from those with permission to upload to us. The site works rather well and I have permissions broken down into roles and specific users per file group.