I had a question regarding WebSphere Portal security the other day which I thought I would share as my answer tries to explain the basics.

Customer Question:
The services that we are seeking about would fall into two categories:
1. Services that are physically deployed within the Portal (as portlets attached to portlet pages)
2. Services that are physically [...]