By default, an application running in an enterprise server instance has the access permissions of the login ID that started the session under which it is running.
You can configure security managers to control access to applications and resources, regardless of the access level that the operating system allows.
We recommend that you carefully consider the security options that you require and configure your system appropriately.
Details on securing your installation, and the resources invoked from within your applications are included in a separate section of the help: Securing an Enterprise Server Installation.