Implementing Security - Oracle ADF 11gR2 Development Beginner's Guide - page 227

The OPERATION_DUTY applicaion role has a mapping to MANAGER_ROLE as enterprise role.
MANAGER_ROLE has VP_ROLE as a member in the Enterprise Roles secion. VP_ROLE has
operationuser as a member. So operationuser will resolve the security constraint and
will provide access to the page.
Have a go hero - assigning different application roles to users
Now you can have diferent users and try out diferent users assigned to diferent applicaion
roles and enterprise roles and check whether the users have proper access to various pages:
Create some users then add them to applicaion roles and enterprise roles and
observe the difference in the role assignments.
Know the hierarchy and research each of the opions available for you to explore
in the jazn-data.xml file.
Disabling ADF security
We have now secured our page properly. However, if you do not want the security in place
later, for tesing purposes, you will have to remove it. You don't have to worry about the
changes that get added while removing security. ADF takes care of modifying all the files
that are afected, and your applicaion will be unsecured in couple of clicks.
Time for action - disabling security for ADF applications
Now let's disable ADF security by using the following steps:
1. Right-click on EmpDirectoryApplicaion and select the Secure opion or select the
Secure opion from the Applicaion menu.
2. Select Configure ADF Security from the submenu.