You can limit
the values a user can read or write to the data source or you can
limit which values a user can alter using the RESTRICT attribute
discussed in Limiting Data Source
Access: The RESTRICT Attribute.
You can use
the WebFOCUS DBA exit
routine to allow an external security system to set the WebFOCUS password. For more information, see the TIBCO WebFOCUS® Security and Administration manual.
You can place
security on FOCEXECs, as discussed in FOCEXEC Security.