Create way to manage groups, then apply a group access permission to a GroupBox (copied from DropBox). The user then can access their groups boxes AND users who have the 'create group' priv manage boxes. All via HTTPS. Also, I would see this as an add-on, not just an enhancement.
