Security policy defines the mapping between roles and privileges. It is the place where you define which role can do what. Celoxis has two kinds of security policies: role policy and object policy. These are explained later.