Web 2.0 users need usable mechanisms for sharing their content with each other in a controlled manner across boundaries of content-hosting or application-service providers (CSPs). In this paper, we present a solution that builds upon existing secret-link mechanism, and augment OpenID identity providers with OpenIDemail and Role-based Trust-management Policy Service (RTPS). OpenIDemail extends existing OpenID protocol to enable OpenID identity providers to use email as an alternative identifier and RTPS provides services for internet users to organize their online credentials and polices, and for CSPs to make access decisions. The proposed solution does not require user to setup another account on each CSP to view shared content and does not require any special software being installed. The mechanism for content hosting and sharing are separated, CSPs do not need to change their existing accesscontrol mechanisms.