Specifying the Authenticated User
The Approval service returns results that are specific to the authenticated user (that is, the user who invokes the operation). For example, when a client application invokes the getPendingApprovals operation, the operation returns the set of approval requests that require the authenticated user's approval.
The authenticated user is identified by the basic http authentication credentials that the client application provides when it invokes an operation in the Approval service. The supplied credentials must identify an active user account on the instance of CentraSite to which the client application is connecting. If the client application submits invalid credentials, the Approval service will return a SOAP fault.