text: **6.7.1 User security and permissions exits**
  
  Content Manager OnDemand provides a user exit so that you can implement your own user 
  exit program to identify and authenticate users that log on to the system. If you use only 
  Content Manager OnDemand internal security, the security exit is not needed. 
  
  You can use the security user exit to authenticate a user’s password. For example, you might 
  want to enforce a sort of password uniqueness or allow logons to occur only at specific times 
  in the day. You can also build a user proxy mechanism to allow users that are not already in 
  the Content Manager OnDemand user database to access the system. 
  
  The permissions exit is called during login if the permissions exit is turned on for folder and 
  application groups. It is also called during a search when the permissions exit is turned on for 
  an SQL query string or document. 
  
  Use the user security exit and the permissions exit to augment the security-related 
  processing of the following activities or events: 
  
  (cid:2) User authentication (checking user security): 
  
  – Log on. 
  – Change a password. 
  – Add a user ID. 
  – Delete a user ID. 
  
  (cid:2) Resource authorization (checking user permissions): 
  
  – Access to a Content Manager OnDemand folder. 
  – Access to a Content Manager OnDemand application group. 
  – Restrict access to specific documents. 
  – Control the SQL search criteria that are used for searching folders. 