BPC Architecture

Relationship Hierarchy

The Relationship Hierarchy manages arbitrarily complex user-account and user-user relationships through an industry proven architecture for hierarchical access control and fine-grained entitlements. The following functionality is supported:

• organize users and accounts to facilitate administration and management
• authenticate users and control access to accounts and other users
• permit many-to-many user-to-account and user-to-user relationships
• model various real-world schemas of organization
• support logically separate data realms within a single system
• dynamically customize application behavior based on business object identity, role, and context

Various scopes-of-access are defined by appropriately arranging users and accounts throughout the Relationship Hierarchy. In other words, users may access only those accounts or other users visible from their position within the hierarchy. In addition, a low-overhead direct association mechanism permits direct many-to-many linking between users and accounts. Once access is granted, fine-grained role-based and identity-based entitlements determine the specific functionality that may be applied.

Finally, the Relationship Hierarchy supports user-specific customization of application behavior. Examples of customizable behavior include multiple algorithms for commission calculation, pre-trade compliance tests, and trade routing. Different versions of these various algorithms may be applied depending on the location within the hierarchy of the calling user.