The VLF has an optional security system with user profiles, passwords1, and authorities to objects in the Framework. This system offers a moderate level of security and it can interface with your own security system if need be.
Note 1: The storage of passwords is provided for backward compatibility purposes only. You should not use this feature in new applications.
Implement Framework Security: Users, Groups and Authorities
Five Things You Need to Know About Basic Framework Security