Authentication and Access Control

Authentication

You can access CodeArts Check using its UI, APIs, and SDKs. Regardless of the access mode, your requests are sent through REST APIs provided by CodeArts Check.

CodeArts Check APIs can be accessed only after requests are authenticated. Code check supports two authentication modes:

• Token: Requests are authenticated using tokens. By default, token authentication is required to access the CodeArts Check console.
• AK/SK: Requests are encrypted using an AK/SK. This method is recommended because it provides higher security than token-based authentication.

  For more authentication details and how to obtain tokens and signatures, see Authentication.

Access Control

CodeArts Check controls user operations in the following ways:

• Role permission control: Roles and permissions are required for adding, deleting, modifying, and querying check tasks and rule sets, viewing rules, creating, importing, and exporting service orders.
• Fine-grained permission control: Operations such as querying tenant projects, setting project creators, and managing tenant project member lists require fine-grained authorization from IAM.