Security investigation

[mzajkowski]

Things to investigate, consider and eventually transfer into separated tasks:

• Content restrictions (public access)
• Permissions
• What and how is returned in terms of "no access" (configurable?)