Whenever the OnDemand Services adds a user to an ACL rule's membership list or removes a user from the list, each iChain server where the ACL rule is being applied needs to be refreshed immediately so that the membership list changes will be enforced. Otherwise, a user who has just purchased a package with a Web application won't be able to run the application until the iChain server refreshes its ACL rules. Likewise, a user whose package has expired will be able to continue to use the package's Web applications until the iChain server refreshes.
OnDemand Services can immediately refresh the ACL rules of one or more iChain servers. For each ACL rule you create, you define the iChain servers you want OnDemand Services to refresh. When a user is added or removed from the ACL rule's membership list, OnDemand Services refreshes the specified iChain servers.
To define the iChain servers that OnDemand Services will refresh when an ACL rule's membership list is modified:
Right-click the ACL Rule object, then click Extensions of This Object.
Click Add Extension, select the commerceProxySecretStore auxiliary class extension, then click OK to display the OnDemand iChain Refresh page.

Click the Add (+ sign) button to add an address to the iChain Servers to Refresh list.
In the list, select the address that was just added to display it in the iChain Proxy Server Address field.
Modify the following fields:
iChain Proxy Server Address: Change the sample address to the iChain server's address. Press Enter after you've modified the address so that the list will reflect the change. If you don't press Enter, the change will not be made.
iChain Proxy Server Refresh Password: Type the existing password required to refresh ACL rules. This is the same password used by the iChain Config user.
Retype iChain Proxy Server Refresh Password: Confirm the password by retyping it.
Click Apply to save the changes.
Repeat Step 3 through Step 6 to define additional iChain server's whose ACL rules list should be refreshed when OnDemand Services updates the ACL rule.
When finished defining iChain servers, click OK, then click Close to close the extensions dialog box.