(Not applicable to Online Data Proxy) Data change notifications (DCN) are always authorized by the "SUP DCN User" logical role. The DCN servlets through which the HTTP DCN requests are sent are configured to require HTTP Basic authentication and then check this role.