Security with e-mail and SMS based request handling

E-mail requests are serviced for all registered UA users whose “from” e-mail ID matches the registration e-mail ID in the system. SMS requests are serviced for all registered UA users whose SMS phone number matches the phone number of a user registered in the UA system.

Role-based access to the executed application applies once it is established that the user is a valid UA user. Security roles are defined when you build the application in Mobile Web Studio. Nonregistered users’ requests are serviced only for applications that have the “everyone” or “guest” roles.

The administrator can also set up an explicit list of phone numbers for people who are allowed access (a “white list”) to CMC services. In the same way, the administrator can set up an explicit list (a “black list”) that blocks access from certain phone numbers. If the user’s number is found on the allowed list, processing of the query completes, if the user’s number is not found, a message is sent that indicates the user does not have permission to access that particular service.

See the Unwired Accelerator Administration Guide for information about configuring SMS features.