When you add content sections via the admin pages, you can specify that folks need to be registered in order to view that section. Doing so sets up filters in tcl/ad-security.tcl that do the work.
Adding a content section means a link to the section will also show up in the user's home page, etc. If you don't want this, you could always set up the filters yourself in a custom start-up proc.