But the attitude that should be adopted, I think, is that the default is
NOT to publish. Corporate calendars and employee databases are a case
in point. IMHO, neither (in the general sense) should be exposed to public
view.
In practice, it might be enough to get prior approval for a general class
of information. For example, we might adopt the principal that project
reports are immediately publishable, or that MADE project reports, in
particular are.
-Allan