Derby database allows access to ONLY ONE APPLICATION and there is nothing we can do about it. This means that if you have a connection to Derby from Aware IM you cannot have any other third party application access the Derby database directly.
However, in most cases there is no need to have a connection to Derby from any third party application - everything can be handled by Aware IM. Aware IM server can host two or more BSV's and you can communicate between these BSV's via services. Or you can communicate with Derby via Aware IM from any remote system (which can be either another Aware IM system or any third party application). Again this communication can use services.
Your security requirements can be handled within the same BSV - you can have a different front end for confidential data and protect this front end by access levels and PROTECT actions within THE SAME BSV.