Security has been greatly enhanced in version 4. Security access is now integrated with the application. There are three security levels that you can use.
1. None. This option leaves the main application open to anyone who has the URL. It also leaves the administrative screens open to everyone. Use this option with caution.
2. Some. This option leaves the main application open to everyone but it requires anyone that tries to run the admin screen to have the proper security setup.
3. Full. This option set the main application with security access. Then for those who will run the admin screen, more security is required.
Security is handled by the application server hosting the LogViewer. You will create roles in the application server and then add users to those roles. No user names or passwords are stored within this application now.
Since the user/service account that is running your application server is the one that accesses the log file, individual users do NOT need access to the actual log files on the server. If you install this tool on the same server as Maximo, then there should be no issue with accessing the file. You can install this tool on a different server but in order to access the log file, the service account running the application server will have to be a domain account and you will have to grant that account read access to the share/folder/log file.
The system displays a friendly name for each log file. This hides the actual path to the log file from the users. Ignorance is not a great security model, but it is one. :)