Connect Filestash to a disposable folder on the storage backend you actually use. Log in as users with different roles and test browsing, upload, download, rename, and deletion. Confirm that a read-only account cannot write or escape its intended directory.
A convenient web file interface widens the access surface. Review authentication, transport security, logging, and backup of the underlying files before exposing it. The pilot succeeds when users get the operations they need without unexpected access to other data.
Akousa