A user needs a CAL (a Client Access License) to open a document. This can be either a Named, Document, Session or Usage CAL; any CAL will do.
A document will only be visible / available for that person if he/she is also authorized to see (open) it. Assuming you have a SBE server, the user needs to have access to the document via NTFS rights to see it in the Access Point.
See your other topic for a similar story: