hi ian
Would it be possible to use the AccessControlProvider from the default "content"
workspace on the security workspace, provided the rep:* nodes were suitably protected with ACLs?
sure. you can define the AccessControlProvider to be used
in the configuration of each workspace separately.
for this you have to add the following element to the workspace
config:
<Workspace>
[...]
<WorkspaceSecurity>
<AccessControlProvider class="...">
[... additional provider configuration ...]
</AccessControlProvider>
</WorkspaceSecurity>
[...]
</Workspace>
hope this helps
angela