text: The user-written exit routine (or set of exit routines) can interact with another security system 
  to determine whether the activity is allowed or disallowed. 
  
  **Important**: When you implement your own security user exit program, you bypass the 
  logon verification processing that is built into the base Content Manager OnDemand 
  product. We advise caution when you bypass the Content Manager OnDemand user and 
  password restrictions. The security of the system can easily be subverted by malicious or 
  defective code. Only use code that you trust. 
  
  When you set the user security exit, set the following parameters: 
  
  (cid:2) Set the Maximum Password Age parameter to the value that best matches the main logic 
  of the user exit program (permit/deny). The Maximum Password Age parameter is set on 
  the System Parameters dialog box, which is accessed by using the Administrator Client. 
  
  (cid:2) Set the Maximum Password Age parameter to Never Expires so that users are not 
  
  prompted to change their passwords. If you are restricting the change password function 
  to a limited number of users, this setting is probably the best overall setting because most 
  users are never automatically prompted to change their password. 