The following series of articles talk about how portal and portlet security is handled within Viewpoint.  They also describe how to implement security and permissions within your portlet.