The ITP/MDK Repository uses a role-based authorization mechanism. In this, a user is assigned a number of roles, either globally, or in the context of a specific project, folder or document. A role consists of a listing of actions that the user is allowed to perform, if he has this role. These actions largely coincide with the menu actions that the ITP/MDK Repository provides. A few represent specific tabs in the Configuration dialog, thereby allowing authorization to be applied to e.g., project configuration or authorization itself.