Security in OpenUI Applications
You define security roles for the users of an OpenUI application in the same way that you define security roles for a portlet application. For OpenUI projects that do not contain any portlets, you define security roles directly in the WebContent\WEB-INF\web.xml file of the project in Software AG Designer as follows:
<security-role>
<description/>
<role-name>execute_some_action</role-name>
</security-role>
For more information about adding security roles to a portlet application and mitigating security vulnerabilities in portlets, see
Security in CAF Applications.