138 IBM Content Manager OnDemand Guide
6.5  Data security
Access to the Content Manager OnDemand data tables is secured through various methods. 
These methods include a secure data model, user authentication, SQL Query support, 
annotation security, and securing access to the Content Manager OnDemand commands. 
These methods are described in further detail in this section.
6.5.1  Content Manager OnDemand object-owner model
Content Manager OnDemand internal security is based on an object-owner model, which is 
illustrated in Figure 6-6. Details about the object-owner model are in the IBM Content 
Manager OnDemand for Multiplatforms, V9.5, Administration Guide, SC19-3352. In this 
context, a Content Manager OnDemand instance is an implementation of the library server, 
one or more object servers, the data access, and the storage model. The data access and 
storage are implemented in the form of objects. The following objects are all Content Manager 
OnDemand objects:
/SM590000Users
/SM590000Groups
/SM590000Application groups
/SM590000Folders
/SM590000Cabinets
/SM590000Applications
/SM590000Holds
/SM590000Storage set
/SM590000Printers 
Figure 6-6   Content Manager OnDemand internal security
The Content Manager OnDemand object-owner model design handles the following 
situations: 
/SM590000A single system administrator to control one or more Content Manager OnDemand 
instances through a single Administrator Client interface.
/SM590000Flexibility to create user administrators who manage users and groups for a specific 
Content Manager OnDemand instance.
/SM590000Flexibility to create report administrators who manage application groups, folders, and 
cabinets for a specific instance.
System Administrator
Report 
Admi ni str ator
User Administrator Users Groups
App lic atio n Groups
Appl ic ation s
OnDemand instanc e A
Ho lds
Folders Cabinets
Storage Sets Printers
OnDemand i nstance B