You can attach an authorization rule to a protected object with the Web Portal Manager or pdadmin utility.