h1. Secure the StockManager
----
The StockManager service allows users to create stock portfolios which are then handed off to the StockPortfolioManager to be managed. In this section we will secure the StockManager such that (1) all communication is encrypted via https, (2) requires users to authenticate with the StockManager with grid credentials, and (3) only allow members of the *Training:Trainees* group managed by the [Grid Grouper|GridGrouper:Home] [https://grouper.training.cagrid.org:8443/wsrf/services/cagrid/GridGrouper|https://grouper.training.cagrid.org:8443/wsrf/services/cagrid/GridGrouper] to access the service. To secure the StockManager service please complete the following steps:

* Next, select the *StockManager (Main Service)* node of the tree.
* Next, select the *Modify Service* button on the middle right to open the *Modify Service Context* dialog.
* Next select the *custom* radio button in the Security Configuration Panel.
* In the *Secure Communication* tab, select the *Transport Layer Security* checkbox under the Secure Communication tab.
* Select *Privacy* from the *Communication Method* drop down for Transport Layer Security.
!cagrid12:StockManagerTLS^Introduce-1.2-Tutorial-Phase6-StockManagerTLS.png!
* Select the *Authorization Tab*.
* From the *Authorization Mechanism* drop down select *Grid Grouper*.
* From the *Grid Grouper* drop down select [https://grouper.training.cagrid.org:8443/wsrf/services/cagrid/GridGrouper|https://grouper.training.cagrid.org:8443/wsrf/services/cagrid/GridGrouper].
* Click the *Load* button, this will populate the *Grid Grouper Browser* panel on the left side of the screen with the Grid Grouper you selected.
* In the *GridGrouper Expression Editor* on the right hand side, select *AND*.
* In the *GridGrouper Browser*, traverse the Training GridGrouper ([https://grouper.training.cagrid.org:8443/wsrf/services/cagrid/GridGrouper|https://grouper.training.cagrid.org:8443/wsrf/services/cagrid/GridGrouper]) => Training => Trainees, selecting the *Trainees* group.
* Click the *Add Group* button in the lower right part of the window.
!cagrid12:StockManagerGridGrouper^Introduce-1.2-Tutorial-Phase6-StockManagerGridGrouper.png!
* Click the *Done* button at the bottom of the dialog.
* Click the *Save* button at the bottom of the *Modify Service Interface* window.

{scrollbar}