Distribution layerNot considered a requirement for nowIntegration layer managing access from different CM/DAM systems Could allow access via XML-RPC, REST, etc....JSR-170 API complianceCustom rights management