This paper presents a policy-based approach for securing the contexts associated with Web services, users, and computing resources. Users interact with Web services for personalization needs, and Web services interact with resources for performance needs. To authorize any context change, a security context is developed. The security context reports on the strategies that protect a context using authorization and restriction policies.