It is possible, start with OES 11.1.2.2 , to add a SM (Security Module) inside WCC . That means that the majority of WCC actions will be checked against the powerful OES rule Engine, as described in Oracle Entitlements Server and Oracle WebCenter Content . That allows to implement an ABAC authorization model, depending upon session context, for instance. Note: it’s a more integrated approach than that documented for WCP, where OVD is used in front of OES for providing Dynamic Roles .)
Blog de Patrick Monaco