Oracle WebLogic Server 11g Administration Handbook

Configuring Security Policies

You can't consider any WebLogic Server resource a protected resource until you create a security policy for it. A security policy associates a WebLogic resource with a user, group, or security role in order to restrict access to that resource. A security policy helps you control access to WebLogic Server resources by specifying which user, group, or security role can access a specific resource and under what conditions. The WebLogic Security Service uses the roles and policies you create to control access to resources.

By default, no WebLogic resource is protected by a security policy. You can secure multiple resources with a single security policy. To protect a set of resources with a single policy, you can control ...