Use this tab to create a security policy for a WebLogic resource. Security policies answer the question "who has access" to a WebLogic resource. A security policy is created when you define an association between a WebLogic resource and a user, group, or role. You can also optionally define a time constraint to a security policy. This association protects the resource the way access control lists (ACLs) protected resources in previous releases of WebLogic Server. A WebLogic resource has no protection until you assign it a security policy.