A {@link SecurityPolicy} defines the broad authorization constraints that must beenforced by a {@link BayeuxServer}.
The usage of {@link SecurityPolicy} has been mostly replaced by the usage of themore flexible {@link Authorizer} for creation of channels, subscription to channelsand publish to channels. {@link SecurityPolicy} is still the central authorization component for handshakes.
A {@link BayeuxServer} may deny the handshake from clients that do not haveproper authentication credentials, or may deny clients to publish on reserved channels and so on; all these activities are controlled by the {@link SecurityPolicy}implementation installed on the {@link BayeuxServer} via{@link BayeuxServer#setSecurityPolicy(SecurityPolicy)}.
@see ServerChannel#addAuthorizer(Authorizer)