Implementing Security - Oracle ADF 11gR2 Development Beginner's Guide - page 218

Security for business objects
Security for business components is added directly to the enity to restrict read access or
to update or remove the enity. The Security opion is available in the General secion for
the Enity object as shown in the following screenshot. To apply security, there are three
operaions available for an enity. They are read , update , and removeCurrentRow . These
operaions are enabled based on the security requirement.
In the same way, we can apply security for the Enity atribute from the Security tab of the
atribute as shown in the previous screenshot. Click on any atribute that you want to secure,
and then click on the Security tab. Only the update operaion is available as a security opion
for the atribute Deptno .
Security for task flows and page-related files
Security for task Flows, web pages, and page deiniion iles is conigured in the jazn-data.
xml ile. To secure these arifacts, we have to have the jazn-data.xml file available for
the ViewController project. This file is created in the src/META-INF folder when we
conigure the applicaion for security.