Content accessible only in application, not in UCM

Question

Hi,
is it possible to create such environment, that user can access some content only in application (custom portal and/or webcenter spaces) but not in UCM? Content should be obviously stored in UCM.
I have no experience with task like this, please provide some pointers.
Thanks

Answer 1

Quick off-the-cuff thought.
what about creating some dummy security groups where you can apply people to them based on what they should be able to see. This would allow you to use the user roles in ucm to map to permissions. But, as jiri said, you couldn't map the content directly to these groups.
You could map the content to a group/account where only a service user could access. then, your app does the content to user role isAccessAllowed logic. if allowed, then you can use a trusted ridc connection to retrieve the content.
other option would be to create a filter that alters user access for that request (in the how-to-components). then you could perhaps could use a trusted key over ssl to verify that the request is coming from your app. or perhaps use the origin/refer url to determine if the location is valid. then the users could be granted access to the group which they would not have access to during a direct call from within the content server.
-ryan