Currently, there are four types of account privileges.
Auth - elementary privilege, required for every user to access system. No user outside of the Auth group may log in to the application server.
Read - this privilege level allows review of all statements within the database. This privilege level is recommended for lower-level administrative user accounts, responsible for supervising who has and who has not submitted their yearly academic statements.
Write - this privilege allows a user to edit the content of other user's statements. The Write-privileged user can also edit statements which have been closed due to time limit. By default, the Write privilege allows for reviewing statements as per Read privilege.
Admin - allows adding and replacing SDL statement forms. Keep in mind that an Admin user does not posses Read and Write privileges per se and these must be added manually.
Currently, ReportKeeper resolves all security issues through Glassfish role mappings.