Authorization Model
Oracle Utilities Testing Accelerator uses an inbuilt security model for authorization. This model contains all the data necessary for the definition of authorizations to function and data. The authorization model is role based and the role defines the level of access an user has within the application. The role is tied to the features of the applications and restrictions are enforced with appropriate role-based checks.
The predefined roles in the application are:
Administrator
Approver
Developer
Administrator is the super user with all privileges and needs to be created initially. All other user creation is done by the Administrator user. The user with Administrator role can perform the following actions:
Managing Releases
Managing Portfolios
Managing Products
Managing Modules
Managing Users
User Access Types
Purging Flow Execution Data
Approver is the role which can perform a subset of functionalities that the Administrator user is capable of. Major functionalities like components creation, flow creation go through an approval life cycle state. Users with Administrator/Approver roles can only approve the actions performed by the users with Developer role, which is the least privileged.
For information about the flow lifecycle and role-based access during the state transitions, see the Flow Lifecycle section.