On the Definition tab on the Access Control Policy form, you reference the condition that determines whether or not to grant access to instance of the specified class. You can also choose if you want to prevent overriding a policy in a descendant class, or not.
The following task is supported on this tab: