6.1 User Management
The application provides for the creation of new users through Weblogic Console. Users should be created by the administrator and details to be conveyed to the user manually. On the first login, the user is forced to change the password. The password is hashed iteratively after being appended with a randomly generated salt value. The hashing algorithm used is SHA-512.
User privileges are maintained by user group. The user group details captured in the weblogic are mapped to the respective users in the User and Groups weblogic screen. The user is provided access to various modules in the application based on the user-user group mapping.