Documentation on assigning user, group, and role permissions to folders and objects in the Portal Catalog is described in detail in Portal Permissions.