The following presentation provides a very good view of the WebSphere Portal V6.1 Security Model.