Yes, this is something were facebook excels at, but it can also create in-group and out-group dynamics. A possible federated solution: https://beesbuzz.biz/blog/6128-Federated-access-control-with...