Preferably, the index entry for a record includes an identification of the location of the content record and a set of access rules, which are, for example, role based.
The intermediary may maintain the index locally and apply the respective rules.