Object support for security in Commerce Server, at least with respect to that aspect of security that are directly relevant to shoppers, is limited to the use of the ProfileObject and ProfileService objects. These can be used to programmatically access a shopper's password, either to set it in the first place, or to reset it as appropriate, or to simply retrieve it for login and forgotten password functionality.
In Commerce Server 2002, the profile functionality can also be accessed using .NET-managed code using either the Commerce Server Base Class Libraries (BCL) or the Commerce Server Primary Interop Assemblies (PIA). In the BCL, the profile classes have been re-factored to make them easier to use, and are accessed using the namespace Microsoft.CommerceServer.Runtime.Profiles. In the PIA, the profile classes are straightforward wrappers of the classic COM profile objects, and are accessed using the namespace Microsoft.CommerceServer.Interop.Profiles.