A custom Java evaluator class can be used to determine if a participant is restricted by the security label value specified and to determine if the participant is able to modify the security label value. If a custom evaluator is set, a participant must also have the Modify Security Labels permission in addition to being cleared by the custom Java evaluator class to modify security labels.

For more information about creating the custom Java evaluator class, see “Customizing Security Labels” in the Advanced Customization section.