I have created my own metadata schema. It works fine as long as i do not configure the platform to use security

I have given full rights to the group the user belongs to, at the base level in the concept editor.

Can someone expain where to put security and what the actual check are.