»This particular use case is not possible to achieve out of the box.«

The Organic Groups module does a great job at controlling who has access to what, yet, we've found in a couple of projects that it didn't quite fulfill our needs.