# Runtime Security Manager

This section provides information about an access policy used by the Runtime Security Manager (security manager) to control access to platform services for Web Runtime version 1.1 (WRT 1.1) widgets. The security manager uses this policy to determine whether a widget has access to a platform service and then prompts the mobile device user accordingly.

The mobile device manufacturer determines the access policy for all WRT 1.1 widgets launched on that mobile device - it is not customizable by the widget developer or the mobile device user. WRT 1.1 provides a default access policy that mobile devices can use if they do not define their own. This section also provides information about the WRT 1.1 default access policy. It is not common for mobile devices to customize the default policy but you should verify this if you are interested in creating a widget for a particular device. For information on a particular mobile device, see the Device Specifications page at Forum Nokia.

The widget security lifecycle for WRT 1.1 is as follows:

- WRT 1.1 files an access policy with the security manager. For more information on the access policy, see section Runtime Security Manager access policy.

- The security manager registers a widget when it is installed.

- WRT 1.1 starts a session with the security manager each time that it attempts to access a new platform service (by creating a new service object).

- During a session, the security manager performs runtime access control to platform services (prompts the user) according to the access policy filed for the mobile device.

- The security manager unregisters a widget when it is uninstalled.