Thoughts on Scenario 1 When the application is on a dashboard or a profile, then this scenario seems on the surface to be straightforward, although I think there's a bit of complexity underneath. Where I think we need to also think about is how this works with something like the spaces proposal where the owner of the application is really a space. You'd expect visibility of the artifacts to be based on membership in the space--but how does that relate/compare to the user specified visibility?

Thoughts on Scenario 2 Distributed visibility rules are going to be very difficult, in part because you need to know the identity of each person in each container. You may also need to have the same notion of friends. For example, "Bob" in container A may be "Robert" on container B. He may be a "friend" of mine in container A but a "Work Colleague" in container B. Also, sometimes the very reason for moving something IS to change the visibility of it. For example, I move things from inside of our Jive instance to Slideshare or LinkedIn. I don't want the same visibility rules at either one to follow the artifact I'm moving.