Security
The following topics provide information about the Primavera Data Service security model, and suggest practices for using the data service securely.
Cookies
Response headers returned by the Primavera Data Service may include cookies set by WebLogic Server in order to maintain session information in accordance with the Java Servlet Specification. These cookies are not maintained by the data service, and do not factor into client requests to the data service. All client requests to the data service must be authenticated using HTTP basic authentication and SSL authentication.