Server Authorization Checks

To cater for other access to IBM Cúram Social Program Management, and where the web client authorization check is disabled, there is a second level authorization check made by the server. This server side check will always log authorization failures, and the client property does not affect this logging.

The log of all authorization failures is stored on the database to allow these failures to be audited at a later stage. The AuthorisationLog table contains the User Name and Security Identifier for the failed authorization, as well as a timestamp indicating when the failure occurred. Analyzing the AuthorisationLog Database Table should be consulted for further details on the AuthorisationLog table.