We need to make two global parts (two root partitions) with different access.
First - most likely, available to be read even without signing in.
Second - there are only three users, and the rest - none at all! (strictly! confidential information)
It is better to implement two separate XWiki or within a single installatio...