You need to ensure that when the users connect to Documents, they only see the files to which they have access