@Andreas I am having difficulty understanding what you are trying to accomplish. Perhaps
Search Filters will enable you to achieve what you want to do. You could also create different ResourceType and then set permissions for access on specific users groups. Creating different
Resource Types might also be an option since you can restrict User Groups from seeing certain Types, though these are can cumbersome to maintain.
I cannot think of a way you can restrict a user's access generally, but allow also allow them access when the resource is in a specific collection.