I don't think the question is whether or not it can be done. It certainly can be done. The question is....can it be done securely to insure it remains a profitable expense of time and effort. Unless you are using a universities system, it's tough to manage your content and keep both secure and easy to use.