For FRAMEWORK manager packages, before you head away with creating a new package it asks whether or not you want to have security set up for the package in use. EVEN if you haven't defined any security at this stage, you can always goto the actions >> package >> Edit package settings and there you can define the security settings for the package.

For reports, you can either give report-level or folder- level security by GOING to the properties of that and choosing suitable roles/user groups that are SUPPOSED to be entitled to view/modify/create reports.

For framework manager packages, before you head away with creating a new package it asks whether or not you want to have security set up for the package in use. Even if you haven't defined any security at this stage, you can always goto the actions >> package >> Edit package settings and there you can define the security settings for the package.

For reports, you can either give report-level or folder- level security by going to the properties of that and choosing suitable roles/user groups that are supposed to be entitled to view/modify/create reports.