How can I let a PUBLIC Laserfiche user (to be used with WebLink for public access) browse, view and search for documents that have been explicitly flagged for PUBLIC access (via a metadata field or tag), regardless of where they currently reside in a folder tree? What access rights do I need to grant?

For security reasons all documents are to be treated as sensitive/private, with no public access, unless explicitly allowed.

Initially I thought of using security tags, but they appear to restrict access even further.

I would like to avoid moving the documents to a special folder with PUBLIC access. The documents should stay where they are, in their current folders, as mandated by business rules and where the employees can easily and quickly find them.

One option would be to have a workflow granting Browser and Read access for PUBLIC user to the document based on a field or tag, but I was hoping for a simpler solution.

I was wondering how others have solved this problem.

Any suggestions would be greatly appreciated.