text: **6.5 Data security**
  
  Access to the Content Manager OnDemand data tables is secured through various methods. 
  These methods include a secure data model, user authentication, SQL Query support, 
  annotation security, and securing access to the Content Manager OnDemand commands. 
  These methods are described in further detail in this section. 
  
  **6.5.1 Content Manager OnDemand object-owner model**
  
  Content Manager OnDemand internal security is based on an object-owner model, which is 
  illustrated in Figure 6-6. Details about the object-owner model are in the*IBM Content*
  *Manager OnDemand for Multiplatforms, V9.5, Administration Guide*, SC19-3352. In this 
  context, a Content Manager OnDemand instance is an implementation of the library server, 
  one or more object servers, the data access, and the storage model. The data access and 
  storage are implemented in the form of objects. The following objects are all Content Manager 
  OnDemand objects: 
  
  (cid:2) Users 
  (cid:2) Groups 
  (cid:2) Application groups 
  (cid:2) Folders 
  (cid:2) Cabinets 
  (cid:2) Applications 
  (cid:2) Holds 
  (cid:2) Storage set 
  (cid:2) Printers 