You can surely think about a model of sandboxing with public and private (even internal for company wide) restrictions.