Access to a logged-in user's information via a session based object

I am in the process of putting together a design for the security layer of a given
application I am working on. The requirements for authentication demand that
the framework take advantage of digital certificates and username/password verification.
The digital certificate end is relatively straightforward in terms of configuration
within WebLogic 6.1. I am planning on implementing a RDBMS security realm for
the username/password verification piece and again, from the documentation I have
seen, it seems relatively straightforward in setting that up as well.
The question I do have is in regards to once the user has successfuly logged in
to the application. Is there anyway to manage and have access to a set of user
info or credentials once they successfuly log in - aka some sort of session based
object that WebLogic Server facilitates? Or is this something that will have
to be explicitly built from our end if requirements do arise that necessitate
user information to be readily available as such?
Any feedback would be helpful....thanks!!

Use the cfquery tag to query the database. If you don't know
how to write sql, I have heard good things about the book, Teach
Yourself SQL in 10 Minutes by Ben Forta.

Similar Messages

How to get logged-in user/group information in WebLogic Portal 10.3.2

Hi bros.
I have a codesnipet to get information about user who actually logged in weblogic portal:
import javax.security.auth.Subject;
import javax.security.auth.login.LoginException;
import com.bea.p13n.security.Authentication;
import com.bea.portal.tools.security.user.*;
public class UGMSummary {
     private static final String username = "weblogic";
     private static final String password = "webl0gic";
     public UGMSummary(){
     public void test(){
          try {
               Subject tmp = Authentication.authenticate(username, password);
               //PolicyItem pi = new PolicyItem();
               //System.out.println("######## " + Authentication.getCurrentSubject().toString());
               UserIDBuilder builder = new UserIDBuilder();
               UserID uid = builder.createResourceID();
               System.out.println("######## Admin ? " + Authentication.isAdministrator(tmp));
               System.out.println("######## Anonymous ? " + Authentication.isAnonymous(tmp));
               System.out.println(" ######## " + uid.getUserName());
          } catch (LoginException e) {
               System.out.println(e.getMessage());
               //e.printStackTrace();
}Some println commands above are used to mark in console. I can ensure that there is an user (admin) logged in weblogic system by executing command: Authentication.isAdministrator(tmp);
Output of codesnipet above is:
######## Admin ? true
######## Anonymous ? false
######## nullMy problem is impossible to use UserID object to get username of weblogic user. Output of command: uid.getUsername() is: null
Somebody tell me why my code doesn't work though it can authenticate an user.
Thank in advance.
ps:
Some Javadoc for UserID can be found here:
http://download.oracle.com/docs/cd/E15919_01/wlp.1032/e14255/index.html
http://download.oracle.com/docs/cd/E15919_01/wlp.1032/e14255/index.html

Hi, Kevin.
I'm glad to see your response again. I found some interesting information from your recommendation link. At this time, I know that impossible to get users/groups information by using DelegatedAtnProxyManagerControlFacade (ref: http://download.oracle.com/docs/cd/E15919_01/wlp.1032/e14255/com/bea/portal/tools/ugm/controls/DelegatedAtnProxyManagerControlFacade.html) interface.
But, I dont know how to get an instance of an object that implemented this interface. My friend give me a codesnipet that shown the way to get a DelegatedAtnProxyManagerControlFacade by using this codesnipet in a GlobalController:
      try
        DelegatedAtnProxyManagerControlFacade delegatedAtnProxyManager = (DelegatedAtnProxyManagerControlFacade)getControl(DelegatedAtnProxyManagerControlFacade.class);
      catch (PolicyRefException e)
        reportPolicyRefException(e);
      catch (OperationNotSupportedException e)
        reportOperationNotSupportedException(e);
      }But I dont know what global.GlobalController actually is ?
I've asked Google for information but I got nothing. Do you know any documentation that describes about this controller ?
Thanks, regards !
Doubt_Man.

Can you restrict a user in ASDM to only allow them to log a user out of a VPN session

We support many clients and we have found that many of them are sharing VPN credentials when logging in via AnyConnect/WebVPN. We were thinking about restricting simultaneous log in to 1. I also know that users may have situations where they lock up a session due to ISP or PC issues and won't be able to connect again until that session drops from the ASA. We would like to enable our helpdesk to log in to the ASA via ASDM and be able to logout a user that has an active connection. This would be in the logging area of the ASA where they could highlight a user and click logout. Is it possible to restrict a user to just this and not allow them to make any other changes to the ASA?

You should be able to do that. You would create a new privilege level (ie 7), assign all commands to that level except (this is my guess) the command vpn-sessiondb, you would put that at a lower privilege level (ie 6). Here's a write-up that may help getting you in the right direction.
http://www.packetpros.com/2012/08/read-only-asdm.html

Current logged in user in PCM

Hi,
Is there anyway I can access the current logged in user details in Oracle PCM? We're trying to create a custom report that would show details per user. And I'd like to make it generic rather than have to create one per user. Any advices/suggestions would be appreciated.
Thank you.
Chandini

Hi,
Thanks for your response.
if not in the database, is this information stored in the session somewhere within PCM? And would we be able to access it, more importantly? It should be stored somewhere, especially if PCM allows you to customize the dashboard etc for the currently logged in user.
If there is no way, then we'll have to create one report per user which is so not a good option.
Thank YOu,
Chandini

Current Logged On User

What I am needing to do is create a file with a name based on the currently logged on user in order to store some logging data. I am using the single sign on method with the connection context cookie. Is there a way to determine who is currently logged on with this method? I am not interested in passwords, just the current logged on user.
Thank You,
Greg Johnson

The company object in both the UI and DI have a UserName property that will contain the name of the currently logged in user.
sboApp.MessageBox sboCompany.UserName & ":" & sboApp.Company.UserName
John.

User defined information when Expense Type - OIE

Hi Gurus,
I need to customize internet expense report based on expense type to provide more user friendly information on page.
Is this possible by personalizatoin or need to do OAF extension for page.
Example:
Use selects Expense type = 'Per Diem', need to populate/show user-defined information per business requirement based on expense type.
Thanks in advance..
Apps Details are here ----
Oracle Application is 12.1.3
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
================

Hi Anoop,
thanks for reply, could you please more specific on how to get this database package for OIE OAF page.
Please let me know if you need more information.
Thx..

Getting Logged on User'Information in an Oracle-Form SSO Partner Application

Hi.
I could run Flight-of Fancy Application and capture user's information by calling the
"Parse_cookie " Procedure.(use the Scenario 2 - Access the Portal and then the FOF App)
and defined an Oracle-Form application as Partner application like FOF.
I want to have Logged on user'Information in the "Oracle-Form" . But the Fucntion owa_cookie.get dosen't work correctly.please let me know what can I do ?
Thanks in advanced.

Hi.
I could run Flight-of Fancy Application and capture user's information by calling the
"Parse_cookie " Procedure.(use the Scenario 2 - Access the Portal and then the FOF App)
and defined an Oracle-Form application as Partner application like FOF.
I want to have Logged on user'Information in the "Oracle-Form" . But the Fucntion owa_cookie.get dosen't work correctly.please let me know what can I do ?
Thanks in advanced. If you're writing your own partner application, then you are correct to get the user information from the output variables
from the parse_url_cookie procedure. You should then set the information you want to keep track of in the cookie, or combination
of cookie and persistent storage in the database. Take care of the security implications while doing this.
On subsequent calls to your application, the user info should be obtained from the cookie and the database, if you
are using a combination of the cookie and database storage to keep your info.
The owa_cookie.get routine is used to read the cookie, which is generated with owa_cookie.send.
These routines work fine, when invoked correctly.
If you are having trouble with them, you're probably not using the calls properly.
The following code provides an example of how to use the owa_cookie calls...
create or replace package testcookie
is
    procedure show (p_name IN VARCHAR2);
    procedure send
        p_name    IN VARCHAR2,
        p_value   IN VARCHAR2,
        p_path    IN VARCHAR2 default null,
        p_expires IN VARCHAR2 default null
end testcookie;
show error package testcookie
create or replace package body testcookie is
    procedure show (p_name IN VARCHAR2) is
        v_cookie owa_cookie.cookie;
    begin
        v_cookie := owa_cookie.get(upper(p_name));
        htp.htmlopen;
        htp.bodyopen;
        htp.print(v_cookie.vals(1));
        htp.bodyclose;
        htp.htmlclose;
    exception
        when others then
            htp.htmlopen;
            htp.bodyopen;
            htp.print('NO COOKIE FOUND.');
            htp.print(SQLERRM);
            htp.bodyclose;
            htp.htmlclose;
    end;
    procedure send
        p_name    IN VARCHAR2,
        p_value   IN VARCHAR2,
        p_path    IN VARCHAR2 default null,
        p_expires IN VARCHAR2 default null
    is
        v_cookie owa_cookie.cookie;
        l_agent varchar2(30);
        l_expires varchar2(30);
        l_path varchar2(100);
    begin
        if p_expires is null then
            l_expires := null;
        else
           l_expires := to_date(p_expires, 'MMDDYYYY');
        end if;
        if p_path = 'ALL' then
            l_path := '/';
        else
            l_path := null;
        end if;
        owa_util.mime_header('text/html', FALSE);
        l_agent := owa_util.get_owa_service_path;
        l_agent := substr(l_agent, 1, length(l_agent) - 1 ) ;
        owa_cookie.send(
            name    => upper(p_name),
            value   => p_value,
            expires => l_expires,
            path    => l_path
        owa_util.http_header_close;
        htp.htmlopen;
        htp.headopen;
        htp.headclose;
        htp.bodyopen;
        htp.print ('Cookie set.');
        htp.bodyclose;
        htp.htmlclose;
    end;
end testcookie;
show error package body testcookie;
grant execute on testcookie to public;If you load this into a schema which a DAD can access, then you can invoke the show and send procedures to view and
generate cookies.
To generate a cookie, issue the following from your browser ...
http://server.domain.com/pls/dad/schema.testcookies.send?p_name=test&p_value=hello
To view the cookie:
http://server.domain.com/pls/dad/schema.testcookies.show?p_name=test

How can i see when someone has accessed my call/text log. (This is possible on google) I have been informed that someone has accessed my activity log and is giving my information to a third party. I believe it is a service tech, but I am not interested in

How can i see when someone has accessed my call/text log. (This is possible on google/gmail) I have been informed that someone has accessed my activity log and is giving my information to a third party. I believe it is a service tech, but I am not interested in persuing that further. I just need to see when my account has been accessed if possible.

Hi lynniewigs,
This is a common concern among Android and I-phone user, and one of the drawbacks to using a smart phone. We lose so much privacy. Our phones become cameras into our homes for us to be spied on.
I don't know what type of phone you have, if it is even a smart phone, but here is an example of an application that you can use to determine which applications are accessing your information and sending it out.
Permission Scanner - Android Apps on Google Play
Google just recently revamp their permissions geared to hide invasive applications that spy and send out your information without your knowledge. Report says be aware of what your Android app does - CNET
Please continue to be mindful of the apps you download and the permissions you give.

Multiple simutaneously logged in users accessing AFP home directories?

Hi,
Many of our problems are described in this guy's blog:
http://alblue.blogspot.com/2006/08/rantmac-migrating-from-afp-to-nfs.html
The basic capability we want is to have multiple simultaneously logged in users to have access to their AFP mounted home directory, which is configured in a sane, out-of-the box setup using WGM and Server Admin.
Multiple user access could take the form of FUS (fast user switching), or simply allowing a user to SSH into a machine that another user is already logged into and expect to be able to manipulate the contents of her home directory.
From my extensive searches, I have no reason to believe this is currently possible with 10.4 Server and AFP.
(here's the official word from apple: http://docs.info.apple.com/article.html?artnum=25581)
I've read that using NFS home directories will work, though.
I want to believe that Apple has a solution for this by now (it's been almost a year since we first had difficulty), or at least a sanctioned workaround. If Apple doesn't have one, maybe someone else has come up with something clever. I find it hard to believe that more people haven't wanted this capability! (not being able to easily search the discussion boards doesn't help, though...)
Thanks for your help!
Adam

Parallels Issue. Track at http://forum.parallels.com/showthread.php?p=135585

Can't log in with valid password, can't boot from disk, can't access disk utility, in single user mode can't reset password as appears locked in caps mode with '?' for forward slash, can anyone help?

Can't log in with valid password, can't boot from disk, can't access disk utility, in single user mode can't reset password as appears locked in caps mode with '?' for forward slash, can anyone help?

Which keyboard layout you were using? German, French ... I suppose your layout is reset to the default: US and you are unable to find the "?" or "/" ...
Please have a look into the keyboard viewer, to see how the layout of your keyboard is actually.
marek

How to get current logged-in user name in data access driver or in universe

In universe, to get the current log in user is via @Variable('BOUSER').
Right now, I need to be able to get the user name in the data access driver. I am writing a customized data access driver because we need to patch some where clause on the the query generated by the universe based on the logged-in user info. I only think of using end_sql parameter or adding an universe level filter to patch the @Variable('BOUSER') to the query, which would not work if user want to use customized query.
Can anyone tell me how to get currentBO user name from connection server ? or how @Variable('BOUSER') is translated into the logged-in user name in the universe?

I do not know your EJB Service. But you should pass the credentials of the current logged on portal user to your service. That's not by default I think.
I had a similar problem with CAF developed webservices. I had to turn on permission checks in my web service and passed the credentials via logon ticket.
Regards, Bernd

How to access Portal Logged in user in Web Service application

Hi Experts,
I have created one Deployable Proxy and based on that i have created Web Based (WAR) project. to consume the proxy i have created Servlet based java file which invokes Web services. Based on this WAR project i created EAR application which deploys on J2EE server.
I am facing issue while accessing Portal Logged in user in my Servlet Class in WAR project so can you please provide inputs for how we can access Portal Logged in user in our Servlet class? also how we can access LDAP detailes of portal Logged inuser ?
I tried to fetch the Logged in user from servlet request but i can't access it giving me null value. Following is the method details that i am using in my servlet.
protected void doGet(HttpServletRequest request,HttpServletResponse response)throws ServletException, IOException
IUser user = UMFactory.getAuthenticator().getLoggedInUser();
String strName = user.getFirstName();
If I checked in LDAP values First name for logged in user is present but in my code its giving Null value.
Can you please provide your inputs on above issue.
Regards,
Rahul

have you found a solution this problem yet?

Win 8.1 domain workstation. Block all access, except for a fews users/groups and domain controller information/date.

Hi!
Win 8.1 pro, domain workstation. How Block all access, except for a fews users/groups and domain controller information/date.
Nuance:
From domain AD is locked Workstation Firewall "Domain profile" edit.
Possible?
cenubit

Hi GirtsR,
I am not sure the command to use the SID to accomplish what you want to achieve, if you only know the SID, you could take use Powershell to find the related information, more information, please check:
Working with SIDs
And a similar thread for reference:
How to find user/group known only SID
More reference: Default local groups.
Best regards
Michael Shao
TechNet Community Support

Retrieving information about the logged in user in Power BI for O365

I am trying to retrieve the email of the current logged in user so i can pass it into a query to my sql server which then adjusts the data based on who is viewing a power bi dashboard. If anyone knows a way to grab that information or even the url that
the file has, then i can parse out its location and change my data based on that as well.

Currently row level security is not supported in Power BI.
Thanks,
Sagar K
(Blog: http://datamazik.blogspot.in/)

Preventing the logged in user from accessing the site

Hi,
wanted to know if it is possible that a user who has already logged in can be prevented from logging in if the user opens a new browser window (IE or Netscape)...on the same machine as well as from different machine.
If there r any programs or guidelines available on this...please let me know.
thanks in advance
rinkub

If the user tries to log in the second time on the same machine (with the same type browser) they will have the same "session" as the first time they logged in.
So, you could check something in the session and not allow the second logon.
In the other case, you will need to keep the users logon information some place (like a database) and check to see if they are already logged on.

Access to a logged-in user's information via a session based object

Similar Messages

Maybe you are looking for