"This makes it impossible to set up a system under OS X where, for example, your colleages could add/modify files in a folder, while clients could access the same folder, but not modify files. "
Just a thought, could you put an alias of the folder your colleagues write to into the clients...