Thanks. But this looks like it allows an admin to choose which users can create a package but not necessarily restrict who else can see the documents that user uploads.