Defining access rights on the level of the shared Workspace is essential for creating a Workspace that is easy to use, effective and secure. The access rights defined at this level are applied (by default) to all Folders, Documents etc. in this Workspace. It is usually not necessary to modify the access rights at the level of individual objects, if they are set appropriately for the Workspace.
Section 4.7 describes how to assign differentiated access rights to a shared Workspace.