Introduction

Talking about security aspects mostly involves examining how RESTful controllers implements communication with external world. Hence, security is mostly implemented and enforced by the core, as the console is basically an external REST client (check High-level Architecture for more details).

...

Defaults entitlements are included at the end of content.xml and always loaded into internal storage.

...