I would like to add an ability for two registered users to share some content privately.
I planned to define conversations database collection to be "Private Data" collection, and add some logic at backend to verify the users are permitted to access the data.
However after publishing site I found out that my understanding was incorrect and only Admin user may access the information with Private permissions set (initially I thought backend access to the collection has Admin permissions).
1. Is there any way to limit access to the collection to only access from backend?
2. Is there some kind of existing database permissions I'm missing which allows me to give the ability described above?