WebLogic security groups problem

Hello

Here's the thing. I am the security configuration of a portal application that I created on JDev. First, I created a group on Weblogic, namely "SecureGroup" (duh), as well as a few users to test, "user1" and "User2" and affected users as members of the "SecureGroup".

On JDev, I created a business role, "SecureGroup" and it is mapped to an application role, also newly created, called "SecureGroupAR". It is now time to assign resources.

I created a simple workflow with a view (*.jsff) just to display a text label. This taskflow was granted the application, "SecureGroupAR" role. When I ran the taskflow application of portal was not found. As I begin troubleshooting, I checked first to the Weblogic console by going to the home page >summary of the areas of security >myrealm >users and groups >user1 > and checked the group including user1 belongs to. strangely, there was no group assigned to this user!

Knowing that I saved my changes, and when the 'Activate changes' button in the upper left pane on the console of WL (view changes and restarts), I also clicked it to save any changes, if they have not already been registered. Problem is, the group shuttle keeps emptying on each others times I restart my app portal.

Can someone tell me what is happening?

Happy and grateful.

JDeveloper 11.1.1.7

WebLogic 10.3

Problem solved. In other words:

1. on your app, whether an ADF or a portal application, you create an application role and grant the necessary resources for this role (or roles, if you have several roles/groups)

2. this application role is mapped to a business role, which is in fact the group you created on WLS.

3. of JDev, you can choose to use policies, groups, users, etc., that you have created within JDev, or to use those already defined in WLS, simply by application--> the properties of the application-->, and then choose security options NOT TO migrate groups and users of JDEV, but instead, take those that are defined on a WLS.


I hope it helps someone as beginning in the ADF security!

See you soon,.

Tags: Java

Similar Questions

  • Security group create a problem at the EBS UM provisioning

    Hi Expert,


    Currently, there are four security groups in my search for Lookup.EBS.SecurityGroup. Who I had reconciled EBS system.
    If I add a liability without security group or with the safety of the 'STANDARD' group, it's okay. But I'm unable to add accountability as well as of other than STANDARD security group.
    Is this problem of the IOM or EBS application problem? How can I solve it?

    Kind regards
    louisette

    Yes this is EBS application deliver nothing to do with the IOM.

    When we install application EBS, STANDARD security group get configured automatically.

    When we create custom security group, we need to run 2 programs in system EBS which is responsible to set up the security groups with the set of APPLICATIONS.

    I don't remember the name of the task of these programs in EBS. But, ask your administrator to do so. If you have admin EBS.

    Let me know the results.

    Kind regards
    Nayan

  • During the installation of Oracle sector Public Revenue Management Applications, we face "" java.lang.ClassNotFoundException: weblogic.security.Encrypt "issues."

    During the installation of Application Framework via./install.sh script, then that account activity held an entry for "WebLogic Admin User ID system" we face as "' java.lang.ClassNotFoundException: weblogic.security.Encrypt" emits messages. "


    Please, help us to solve this problem as soon as POSSIBLE.


    Details of the environment:

    Operating system: 64-bit 5U8 OEL.


    Follow-up document:

    PSRM - sector Public Revenue Management Oracle Installation Documentation (Doc ID 2067339.1)-PSRM_Installation_Guide_v2_4_0_0_0

    Error message:

    Enter the value to be encrypted: 160122:164014 < criteria > error occurred running /usr/java/jdk1.6.0_45/bin/java-Dweblogic.RootDirectory=/ebiz/app/ouaf/Release-FW-

    V4.2.0.0.0/FW. V4.2.0.0.0/data/product/WLS.splapp weblogic.security.Encrypt:

    Output is Exception in thread "main" java.lang.NoClassDefFoundError: weblogic/security/encryption

    Caused by: java.lang.ClassNotFoundException: weblogic.security.Encrypt

    in java.net.URLClassLoader$ 1.run(URLClassLoader.java:202)

    at java.security.AccessController.doPrivileged (Native Method)

    at java.net.URLClassLoader.findClass(URLClassLoader.java:190)

    at java.lang.ClassLoader.loadClass(ClassLoader.java:306)

    to Sun.misc.Launcher$appclassloader$ AppClassLoader.loadClass (Launcher.java:301)

    at java.lang.ClassLoader.loadClass(ClassLoader.java:247)

    The main class is not found: weblogic.security.Encrypt.  Program ends.

    End of output

    The program finished in line 118 of the data/bin/perllib/SPL/splLog.pm.

    Error: install.plx has not completed successfully. On the way out.

    From now on, we have completed the slot status of activities for your reference.

    Sl.No

    Name of the activity

    Status

    1

    Create users and groups

    Completed

    2

    Install prerequisite software

    Completed

    3

    Oracle 11.2.0.3 database

    Completed

    4

    Java 6

    Completed

    5

    Oracle WebLogic 10.3.6

    Completed

    6

    Hibernation 4.1.0

    Completed

    7

    Micro Focus Server 5.1 WrapPack 8

    Completed

    8

    Install Oracle Utilities application.

    Here issue facing

    9

    Install Oracle Utilities Application Framework Service Pack 1.

    Pending

    10

    Install Oracle Public Revenue Management sector

    Pending

    11

    Deploy Oracle sector Public Revenue Management application

    Pending















    Concerning

    Knani G

    Hello

    During the installation, we have wrongly given Home Directory Web Application Server like/Ebiz/app/woof/Middleware

    So we changed the Homepage Directory Web Application Server as /ebiz/app/ouaf/Middleware/wlserver_10.3

    then the problem is resolved.

    Thanks for the support.

    Concerning

    Villi Kumar

  • Creating security group with grants decided in active directory - Server 2003

    Hello

    I need to create several different security groups for about 7 users with grant different access rights, but all users will access the same folder main and some of the same void records. I created a group with some of the users but appear to have access to all the folders there particular subfolder but I only want to have access to some of the folders in the selected subfolder.

    I guess what I'm asking is how do I create groups of different security with grants decided for each groups and ensuring that users in these groups only have access and subsidies to certain folders.

    I don't know if I explained myself properly but I certainly confused myself, I hope someone can point me in the right direction to solve this problem.

    Thanks in advance

    Jah

    Jah,

    For assistance, please ask for help in the appropriate Microsoft TechNet Windows Server Forum.

    Thank you.

  • The opportunity to identify a specific storage for each user or security group.

    Hi all

    I asked how to specify storage for each user or security group on the server of the University Complutense of Madrid. ex. I want user 'weblogic' unable to download a document on the server of the University Complutense of Madrid, more than a gigabyte. the user can check in several files, but thetotal space for all files are not a gigabyte.

    Thank you

    I asked how to specify storage for each user or security group on the server of the University Complutense of Madrid. ex. I want user 'weblogic' unable to download a document on the server of the University Complutense of Madrid, more than a gigabyte. the user can check in several files and the total space for all files not exceeding a gigabyte.

    You can write a rule to achieve this where in the xStorageRule is evaluated based on any set of metadata such as dDocAuthor or dDocSecurityGroup etc., or a combination of metadata.

  • Change security groups are allowed access to the project

    Hello

    We have a project of the Disqualification in our production environment that allows only administrators to view/access it. We now allow access of data analysts. I know that we could just edit the prod Manager access security group, but due to some storage issues related to the postgres DB that uses a Disqualification, we clearly downwards and the redeployment of the Disqualification (and the project) on the prod server every two weeks. This means having to manually modify access groups after each reinstall. To save the duty of our many stop to promote a new project dxi file, is there something that can be added to all config files to allow data analysts access the project? Editing a config in our backup file would be very fast and simple.

    See you soon

    Jon

    Unfortunately, no, no.

    I can't imagine a scenario that would require the Disqualification to redeploy completely. If there is a problem of PostgreSQL, the worst case would be a fall and recreate the Pb of results, I would have thought.

  • Has anyone created new security groups... and how did you do

    We have problems with giving people the opportunity to view and modify other emails/forms/etc.   Anyone who sets up security to pull away, specifically, groups the possibility to remove or modify?  Not everyone who uses our system needs to change or remove, so I wasn't sure if someone had created security groups that pulls this ability of some specific users...

    Thank you!

    When I told our CSM, she said you have to contact support and they can do it on a case-by-case basis.  But we seek to implement the same thing, it would be interesting if you managed to get this Setup.

  • NSX security group cannot get the address IP of VM

    Hi all

    I have a strange situation in my lab environment I create a security group consist of 2 virtual machines, but when I checked the addrsets, a single IP is in the list, here is the screenshot:

    addrsets.png

    It is supposed to be reported 2 IP: 192.168.0.34 and 192.168.0.38, but NSX only see a single IP address. Then I try to add another virtual machine with the IP 192.168.0.33, NSX can see two IP addresses:

    addrsets2.png

    Seems the VM with IP 192.168.0.34 has a problem, but I don't know why the question isn't that arrived at this virtual machine, an idea how to solve it?

    Thank you very much

    ARO

    Davy

    What version are you running to NSX?

    Improve the detection of mechanisms have been since 6.2, that do not rely on VMware tools.

  • Add vNIC PortGroup scope with the REST API security group

    I created a security group within the reach of a PortGroup via the REST API. Now, I'm trying to add a vNIC, also via the REST API.

    To help illustrate, I have a JMTest1 VM with 1 vNIC connected to the PortGroup which is the scope of the security group. When I change this group the first item in the list that could be added to the security group is the first (and only) JMTest1 vNIC.

    AddvNICToSecurityGroup.PNG

    To add it via the REST API, I need to provide the following:

    https://192.168.x.x/API/2.0/services/SecurityGroup/SecurityGroup-XX/members/ < member-moref >

    for example I need to understand what the < member-moref > for the vNIC to JMTest1 and this is what I have a problem with.

    If I add the vNIC through the user interface and then interrogate the security group it gives me below the answer:

    < securitygroup >

    < objectIdobjectId > securitygroup-xx < / objectId >

    < type >

    < typeName > SecurityGroup < / typeName >

    < / type >

    < name > JMTest7 < / name >

    < description / >

    < revision > 9 < / revision >

    < objectTypeName > SecurityGroup < / objectTypeName >

    < scope >

    < id > dvportgroup-xxxxx / < ID >

    < objectTypeName > DistributedVirtualPortgroup < / objectTypeName >

    < name > dv-xxxxx < / name >

    < / scope >

    < extendedAttributes / >

    < inheritanceAllowed > false < / inheritanceAllowed >

    < member >

    500758f6-b97b - 7A 79 - 0c < objectId > 04 - 996f53edf3f0.000 < / objectId >

    < type >

    Vnic < typeName > < / typeName >

    < / type >

    < name > JMTest1 - NIC 1 < / name >

    < revision > 6 < / revision >

    < objectTypeName > Vnic < / objectTypeName >

    < scope >

    < id > vm-xxxxx / < ID >

    < objectTypeName > VirtualMachine < / objectTypeName >

    < name > JMTest1 < / name >

    < / scope >

    < extendedAttributes / >

    < / member >

    < / securitygroup >

    It seems that the < member-moref > for the JMTest1 vNIC is < objectId > 500758f6-b97b - a 7, 79 - 0c 04 - 996f53edf3f0.000 < / objectId >

    If I run now:

    https://192.168.x.x/API/2.0/services/SecurityGroup/SecurityGroup-XX/members/500758f6-b97b-7a79-0c04-996f53edf3f0.000

    then the vNIC is successfully added to the security group. (yay!) So I am now left with the task of how to get

    500758f6-b97b - 7A 79 - 0c < objectId > 04 - 996f53edf3f0.000 < / objectId >

    of a vNIC?

    I have looked at the object in the Mob vCenter and via PowerCLI, but cannot see how to derive from it.

    Anyone know the answer to that?

    The uuid vnic is created by concatenating the vm instanceUuid + '. ' + the last three digits of the vnic device key.  (The vnic is located in the area of the config.hardware.device of the virtual machine and the key will be to shape 4xxx, where xxx represents the 3 numbers you need).

  • Need info regarding the behavior of Oracle UCM accounts and security groups

    Need information about the behavior of Oracle UCM accounts and security groups.

    Oracle UCM version: 11.1.1.5.0

    Steps to follow:
    1. log in with the user "weblogic" and content created with the id of "content1".
    2. apply the "@acc1 (R)" and "TestGroup1" to her quote created in step 1
    3. close the session
    4. connect as that of "acc1user1", the user is not able to see the "content1".
    5. close the session
    6 log in as "role1user1", the user is not able to see the "content1".

    Account information and group:
    1. the user "acc1user1" is part of the "@acc1 (R).
    2. the user "role1user1" belongs to 'role1 (R)' and is mapped to "TestGroup1" at the Complutense University of MADRID

    Expected:
    The 'acc1user1' and 'role1user1' should be able to see "content1" because they have at least the read permission.

    Please help me understand why users aren't able to see the content.

    See section 5.5.1.1 in the Manual: http://docs.oracle.com/cd/E23943_01/doc.1111/e10792/c05_security.htm#BGBGIJDJ

    If the accounts and roles are used, the result is an intersection, not a Union.

  • Pagination fails when searching through search results security groups

    When I'm doing research for a paper of the specific security group, in the search results pagination works fine. But when the research spans several security groups, the first page of the search results shows the number of law, but when you go on the following pages, the County is messed up. For example if the result total count value would be 400 in the first page. The second page would show only page 2 of 20 or something like that. and we can get on the pages after this. Is there a way to fix this?

    Thanks for your help!

    I also opened an SR for that matter, support seemed unfamiliar with it.

    I finally found a reference to the question of the basis of knowledge in bug 10055173. The proposed solution is to update CS10gR35UpdateBundle to a version > = 86. Version of this bundle is 79, so you must apply for it. I'm done with build 92.

    I installed the new version. The occurrence of the problem, however. Finally, I have disabled the SimpleProfiles component (which we do not), and this seems to have solved the problem. I also determined that disabling SimpleProfiles under generation 79 did not fix the issue.

  • Remove the "Guest" user integrated security group "domain guests.

    We are running Windows Server 2008 R2 Standard.  I accidentally added the "Guest" user built into the 'Domain' security group invited and what you should now remove it to return the settings to how they were before.  However, everytime I try, I get the message...

    'The primary group cannot be removed.  Define another main group if you want to remove this one.'

    I had put the integrated group of "Guests" (including users 'Guests' integrated is a also a member of) to the primary group, however, the ability to set a primary group is grayed out.

    I hope someone has an idea?

    Thank you very much!

    Tim

    Post in the Windows Server Forums:
    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/

  • HP mini 110 unlock, after successful computer unlock, website security certificate problem

    Web site security certificate problem

    Ok

  • Sync phone to PC Client/Server applications use what security group to access the files on PC Win 7

    Programs of client server that connects to the computer from a phone and store data on the PC as the synchronization programs have what user ID and are able to write to the disk by security group file permissions. Users authenticated Internet Explorer, system, administrators, customer ID current user appears on the phone and must be enabled (admin) and the password entered to connect.  If the customer is logged as administrator? How can there be two users with the same user id?  One by the PC and the other on the phone.  If the phone connects the PC as a user in this group what id permissions?

    Question 2: If I agree a technician to fix it to my PC and fix it, what is it connected as? and what group permissions is using?  How to protect against the connection later?

    Thank you

    This issue is beyond the scope of this site and must be placed on Technet or MSDN
  • Cisco Unity Connection (CUC) - import LDAP user based on the security group and then assign a model

    Need to CUC automatically import users and assign a certain user or role model if they are added to a specific security group. (These are the help desk users).  Username admin accounts they will use to sign in CUC differs from that there windows account that is linked to their profile of voicemail.

    Current - now we must import new recruits and assign the correct model

    Want - when a user is added to a security group in AD, so when CUC doing his nightly sync, it automatically import user and assign a preconfigured for the account and all user model is automatic and I have never import it back these users.

    At the present time the course help desk users are already imported via LDAP and have the role that was.

    Suggestions?

    Not something that the UCA can do out of the box.

    The UCC does not offer, is to do the LDAP synchronization and once they are in CUC, to import, choose the model.

Maybe you are looking for

  • MacBook stops while sleeping since Sierra

    I've already posted similar to this, but the only solution suggested to reset the SMC did not work, so try again... So, every night that the 2015 MacBook sits there, lid closed, making the face recognition in Photos in the background and everything h

  • recover the old data synchronization

    Hi all I bought a new laptop, but when I connect anything in sync gets synced so I lost all my passwords!I don't have the key to recovery from the old account to sync. I am able to get my old data sync, which are very important for me. THX

  • Card SD NOT recognized on the Libretto U100/U105 with Win XP

    I have several booklet, a combination of U100 and U105, with Win XP SP3. I now have a camera with an SD card, but nothing to see everything in the booklet any SD card into the slot.I'm astronished and disappointed that Toshiba is a not ship computers

  • Satellite A100 - c:\windows\system32\drivers\sptd.sys blue screen error

    Hello Hoping someone can help with this. I have a Toshiba A100 with Windows XP Media Center Edition 2005. When I try to start my computer, I get a message saying that windows did not start successfully.I gives me the options of:Safe modeSafe mode wit

  • backup of my OS and files on a disk to reinstall

    I put my SSD to level on my Dell Mini 9, 8 GB, 32 GB and need to reinstall my OS and files