TYPO3 Core

I have the following problem:

I need to create two file mounts, one is a public one where the superior organization puts images for the subordinate, and one for the subordinate in which the people from there can put their own files.

I wanted to configure the filemounts so that the group can't edit/delete/whatever files in the public mount, they should only read there, and in the private file mount they should be allowed to do everything from editing to copying recursively.

The problem is that the file access rights aren't bound to file mounts, they are bound to the user. Thus, when I have the public file mount above the private in the user group list, the user can delete and edit files in the public fm because they are allowed to do so in the group for the private fm.

Is there the possibility to move the file access rights to the file mounts, maybe configurable like the page tree access rights are in the access module? Or is there a workaround for my problem?

(issue imported from #M15974)