Your Security Manager must implement the applySecurity method.
public void applySecurity(PortletRequest request, MDEXState mdexState, Query query) throws MDEXSecurityException;
The Query class in this signature is com.endeca.portal.data.Query. This class provides a simple wrapper around a Conversation Service request.