You need to ensure that User1 can access all of the public folders in the organization from Outlook Web App.
You need to prevent all the members of a group named Sales from accessing the public folders from Outlook Web App.