Access Visitor entitlements programmatically

Hi,
I wonder if it is possible to access (create, manage, delete) Visitor Entitlements programmatically by a Beehive control/Helper ...
It is possible to do this for Delegated Admin roles with the DelegationRoleManagerControl control provided by Oracle. But I didn't find an equivalent to manage the Visitor Entitlements roles.
I'm using Weblogic Portal 10.2 (Weblogic Server 10) on a JRockit R27.6.0 1.5.0_15
Best.
Edited by: user11804594 on 19 août 2009 02:54

Hi
if you want to get the list of roles for the currently logged in user thats possible.
If you want to get the roles for any logged in user, its possible if you know what the entitlement definition is before hand. if the entitlement is based on directly assigning users to the role or groups to the role, then its fine and can be done without needing the code to know which role is which group, it can be done programmatically.
if you have a more complicated and or clauses in the role definitiob or do not know the entitlement definition before hand then I dont think it is.
Which scenario applies to you?

Similar Messages

Weblogic 10.3.2 visitor entitlements roles issue

1)I am upgrading my weblogic portal application from Weblogic 8.1SP4 to Weblogic 10.3.2 version. I found that roles that created under visitor entitlements thru weblogic portal administration portal are not visible to assigned user.For example I created testRole for my application and added user testuser to this user.When I login to my portal application this user should able to see the portal page that related to testRole.But currently this is not working.
To fix the above issue I created one new group under User and groups management and added the above user to that group and added that group to testRole. Now the user is able to see the portal pages
My question is why the user is not able to access the roles when he is not part of any group.Because My portal application have different business users with different entitlement setups for which I cannot categorize under groups.
The above functionality is working fine in Weblogic8.1SP4 production environment.
Regards,
Satya

Hi Satya
Post on the WebLogic forum....
WebLogic Server - General
Cheers
David

Weblogic 10.3.2 - Visitor entitlements role issue

1)I am upgrading my weblogic portal application from Weblogic 8.1SP4 to Weblogic 10.3.2 version. I found that roles that created under visitor entitlements thru weblogic portal administration portal are not visible to assigned user.For example I created testRole for my application and added user testuser to this user.When I login to my portal application this user should able to see the portal page that related to testRole.But currently this is not working.
To fix the above issue I created one new group under User and groups management and added the above user to that group and added that group to testRole. Now the user is able to see the portal pages
My question is why the user is not able to access the roles when he is not part of any group.Because My portal application have different business users with different entitlement setups which I cannot categorize under groups.
The above functionality is working fine in Weblogic8.1SP4 production environment.
Regards,
Satya

I think the rolemappings in the application are mapped to groups.
The rolemappings are defined through deployment overrides, such as for example, weblogic.xml (which is located in the WEB-INF/lib directory of a WAR file).
An example of such a role mapping is the following:
<weblogic-web-app ...>
     <security-role-assignment>
          <role-name>EMPLOYEE</role-name>
          <principal-name>employees</principal-name>
     </security-role-assignment>
     <security-role-assignment>
          <role-name>MANAGER</role-name>
          <principal-name>managers</principal-name>
     </security-role-assignment>
</weblogic-web-app>The role-name(s) are set in the web.xml of the application, through a security constraint. The principle names are the user or group names
configured in the admin console.
When you edit the weblogic.xml to included a security role assignment and add role-name - principle-name mapping, for example
<security-role-assignment>
     <role-name>visitor</role-name>
     <principal-name>testuser</principal-name>
</security-role-assignment>now the testuser has visitor rights.

Visitor entitlements have disappeared in Web Logic Portal console

Hi all,
Please help! We have an issue whereby our users no longer have permission to access parts of our web application. Upon further investigation, when looking in the Portal console under visitor entitlements, we see the following message:
There are no visitor entitlement roles to display.
We have checked the portal database, and can see the roles are still in there, but aren't being retrieved by the application. We can also add new roles through the console, which are persisted in the database, but these too do not show in the console.
This had previously been working, and we are not sure what has changed.
Please advise what further information I can provide to help resolve this!
Kind regards,
Mike

Hi,
I was able to find a white paper which discusses this topic.
http://edocs.bea.com/wlp/docs81/whitepapers/vcr/index.html
If this isn't helpful, please post this question to the portal newsgroup at http://newsgroups.bea.com/bea/forum.jspa?forumID=2044
cheers
Raj

Are Visitor Entitlement Roles == Scoped Roles

I'm working on the security implementation for a WebLogic 8.1 Portal application.
I've been doing some prototyping and am trying to determine where Visitor Entitlement
roles are stored. Are these implemented as scoped roles from a WL platform viewpoint.
I created two test roles for my portal and do not see any scoped roles under
the application or the portal node in the WebLogic console.
I'm trying to determine if these portal entitlement roles are/can be treated as
weblogic platform roles and can be used in security annotations for an EJB or
Java Control, and if they can be used for IsCallerInRole. I can create a security
policy to protect the portal resource, but I'm looking for a way to apply the
corresponding security in the business layer.
Thanks in advance for any advice.
Jim

Jim,
The WLP roles are stored in the default role mapper provider. They are
scoped roles, but only attachable to WLP resources (pages, portlets, etc.)
and cannot be used to protect J2EE resources. The basic reason for this
is because WLP roles can include custom predicates (date/time/profile
attributes) that rely on layered product classes that the base application
server is unaware of and cannot edit using the WLS console.
In Service Pack 3, the WLP admin tools will allow the converse - that is,
you'll be able to reference/use WLS global roles in WLP policies.
Service Pack2 adds a new tag to the auth taglib which allows you to
do a isUserInRole check against the WLP (and WLS) roles.
-Phil
"Jim Maycott" <[email protected]> wrote in message
news:[email protected]..
>
I'm working on the security implementation for a WebLogic 8.1 Portalapplication.
I've been doing some prototyping and am trying to determine where VisitorEntitlement
roles are stored. Are these implemented as scoped roles from a WLplatform viewpoint.
I created two test roles for my portal and do not see any scoped rolesunder
the application or the portal node in the WebLogic console.
I'm trying to determine if these portal entitlement roles are/can betreated as
weblogic platform roles and can be used in security annotations for an EJBor
Java Control, and if they can be used for IsCallerInRole. I can create asecurity
policy to protect the portal resource, but I'm looking for a way to applythe
corresponding security in the business layer.
Thanks in advance for any advice.
Jim

Visitor entitlements in a admin extension

Hi,
i want to extend my portal administration console.
Is there a way to get a list of all visitor entitlements?
Thanks!
Markus

look at RolePolicyManager
e.g.
import com.bea.p13n.management.ApplicationHelper;
import com.bea.p13n.entitlements.common.EntitlementConstants;
import com.bea.p13n.entitlements.management.RolePolicyManager;
String entAppName=ApplicationHelper.getApplicationName();
String webAppName = ApplicationHelper.getWebAppName(request);
String[] policies = RolePolicyManager.listRolesForResource(entAppName, webAppName, EntitlementConstants.P13N_ROLE_POLICY_POOL);

ApplicationVerificationFailed with keychain-access-groups Entitlements

Hi,
We have a hard time compiling a release version of our AIR app for IOS.
We had a first version compiled and submitted succesfully to Apple.
Wa are trying to build a new release version, but are now stuck with the "ApplicationVerificationFailed" message when trying to deploy this app on a device (with a inhouse sdk mobileprovision)
In this new version we added "keychain-access-groups" Entitlements to allow the app to share Keychain data.
If we remove the Entitlements part of the application descriptor, it succeed with compilation and install on device over usb.
Has anyone experienced problems with setting "keychain-access-groups" properties ?
I found these posts that are a bit outdated, and we even tried the old workaround solution with codesign on a mac without success either...
Adding iOS entitlements to AIR apps
iOS5 support for AIR/Using external SDKs to package apps
I'm really stucked with this, as we are releasing a group of applications, that should share license crendentials, with some of the applications developed in native languages and some in AIR.

Hi,
Solved this, i had a bad bundle prefix id in the Entitlements section. (i build with inhouse sdk for internal releases and standard sdk for appstore releases)
I found the issue looking at the ios console log with this tool (i'm on windows) : iPhone Configuration Utility 3.6.2 for Windows
The log told me that there was an issue with the "keychain-access-groups" value not valid for the current provisionning profile.
I will actually invest a little time in writing build scripts, as the process of manually switching between dev/inhouse/appstore releases is not error proof...
Eric

How to create visitor roles programmatically

Could you please help me how to create visitor roles programmatically using weblogic portal.
Thanks in advance

Hi,
Point this method to the selectItems under selectonechoice.
        if (yourList == null) {
            (yourList = new ArrayList();
            DCBindingContainer bindings = ADFUtil.getDCBindingContainer();
            DCIteratorBinding iteratorbinding =
                bindings.findIteratorBinding("yourVO1Iterator");
            if (iteratorbinding != null) {
                Row[] rows = iteratorbinding.getAllRowsInRange();
                String value = null;
                Long key = 0L;
                for (Row row : rows) {
                    value = (String)row.getAttribute("Attrib0");
                    key = (Long)row.getAttribute("Attrib1");
                    yourList .add(new SelectItem(key.toString(), value));
        return yourList;
Thanks
Nitish

Access plot colors programmatically

Hi all,
When plotting multiple plots on the same axes, Labview automatically assigns each plot a different colour.
How can I programmatically access this colour sequence (an array?) and set it with an array of colours I choose?
Regards,
Jamie
Using Labview version 8.0

Hi Jamie,
the following code should work:
Ton
Message Edited by TonP on 02-11-2008 07:45 AM
Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
Nederlandse LabVIEW user groep www.lvug.nl
My LabVIEW Ideas
LabVIEW, programming like it should be!
Attachments:
SetPlotColor.PNG ‏4 KB

Grant access to page programmatically

Hi
I am looking into using pl/sql procedures in portal 9.0.2 to grant access for users and groups, programmatically, to a page that i have created.
I am trying to use this procedure:
wwsec_api.set_user_acl(p_object_type_name,p_owner ,p_name ,p_authorization_function );
However, i m not too sure how to set the variables for p_object_type_name and p_name and how are i can extract the correct object_type_name from WWSEC_PRIV_OBJECT_TYPE. I am also not sure if I am on the right track.
Would appreciate if anyone can advise on this procedure and if there are any other ways of implementation.
Thank you and best regards
Siew Leng

Select the Documents folder, choose Get Info from the Finder's File menu, give them access under Sharing & Permissions, and tell them to use the Go to Folder command in the Go menu to access /Users/yourname/Documents/. Alternatively, move them to /Users/Shared/.
(75108)

Access navigation rules programmatically?

Hello.
Is there any way to access the attributes of a navigation rule programmatically?
In Struts, I was accustomed to getting the URL of a forward that I had set up by doing something like:
<html:rewrite forward="myForwardName"...>on my JSP page, but I can't seem to find any equivalent of this functionality in JSF.
Also, I would like to be able to access the navigation rule attributes from Java code, too, particularly the "to-view-id" attribute, which is something I did in Struts with code like:
String path = mapping.findForward("myForwardName").getPath();I know that this isn't apples-to-apples, and that a global forward in Struts is not set up the same way as a navigation rule in JSF, but I'm hoping that there's some kindly JSF super-genius who can point me in the right direction. :-)
Thanks!
--Mike

Thanks, rei_nanto--that did shed a little light on the subject!
Now, unfortunately, I am not using the Sun reference implementation (we're using the IBM implementation), and so I don't have the ApplicationAssociate class you mentioned.
I went out and looked at the ApplicationAssociate and NavigationHandlerImpl classes in the RI jars, though, as you suggested, and I can see how it could be done.
The reason I'm looking for a way to get this information, especially the <to-view-id> information, is because I need to do a popup window from my JSF application page, and I would like not to hard-code the URL of the JSF page I want to appear in the popup.
Hence, if I could get the path out of <to-view-id> programatically, I wouldn't have to hard-code the path in my popup.
Any additional thoughts on the matter, given this additional information?
Thanks!
--Mike

How to access View object programmatically and ...

Hi,
I have a hypothetical situation. I have for example a VO based on Emp and a data table in the UI with a button.
When pressing this button I want to call a method that will programmatically read in teh values of the current row and then update a field in the UI (say an outputText).
My problem is I am not sure where to pu this logic. I thought I shouldI create a new method in the Application module then bind that methid to the button. By having the code in the AM then it can easily access the VO attributes. But how can the method in the AM access the values in my backing bean and set them or read them ?
I am not sure where to put the code - I could put it in teh backing bean and call teh application module from there but the manual doesn't really recommend that I think.

This is probably logic that should be in the backing bean in a method that is activated from your button.
The ADF Developer Guide shows you how to do it here:
http://download.oracle.com/docs/html/B25947_01/bcservices005.htm#sthref681

Accessing search criteria programmatically

I have a client who asked me to modify a report that highlights the background of an on-demand subreport. He then searches for a cheque number and when he finds the right cheque number, he clicks on the subreport.
However, the subreport is highlighted (just a yellow background colour), for all cheques on the same page. He has been clicking on the wrong one.
He uses the Crystal interface to run the reports. He wants to hit the search button, put in the cheque number, go to the page with the cheque number but have only the subreport for that cheque number highlighted.
I know I can use a parameter to programmatically change the background colour and have him enter that during a refresh but he still has to search for the cheque and it could be 50 pages to look through.
Any ideas? TIA rasinc.

Simply search the subreport again

Accessing an MBean Programmatically

Hi can anybody tell me how access an mbean by a sample program .
For example in case of jboss , the jboss-service.xml contains an entry like the following...
<mbean code="org.jboss.jmx.adaptor.rmi.RMIAdaptorService"
name="jboss.jmx:type=Connector,name=RMI">

<attribute name="JndiName">jmx/rmi/RMIAdaptor</attribute>

<attribute name="RMIObjectPort">0</attribute>

<attribute name="ServerAddress"></attribute>
</mbean>
From this I use the part ....
'<attribute name="JndiName">jmx/rmi/RMIAdaptor</attribute>'
i.e. my JNDI Name is jmx/rmi/RMIAdaptor
So in my code it is like ..
MBeanServerConnection server = (MBeanServerConnection) ctx.lookup("jmx/rmi/RMIAdaptor");
Now in case of JCAPS from where I can get the JNDI lookup string name ? If some one has any sample code or doc it will be very helpful for me .
Regards,
Ayan

To enable the JMX agent for local access, add the following JVM property:
-Dcom.sun.management.jmxremote
To enable remote monitoring a couple of other JVM Options need to be set:
-Dcom.sun.management.jmxremote.port=portNum
-Dcom.sun.management.jmxremote.ssl=false
-Dcom.sun.management.jmxremote.authenticate=false
See also: http://java.sun.com/j2se/1.5.0/docs/guide/management/agent.htm

Accessing UME data programmatically

Is it possible for me to access UME data on one server when running on another server?
Here's the scenario:
I am building some common code that will get information about a user from various sources and create one object to contain all that data. For example, the code will get some data from an Oracle database, some other data from a Notes database and some data from the UME. I'll then build an object that I will return to the calling program and it can use this information while the application is running to improve the 'user experience'
I know how to read from the UME on the server I'm currently running on but that becomes a problem when the code is running on the local engine. We have all our developers setup with a local engine so they can test their code locally before putting on server.
For accessing Oracle this is no problem because we just use the same datasource name (defined in Visual Admin) as we have on the server. The actual datasource definition on local engine points to the same Oracle server/database as the development server's datasource does. This means that our developers can test their code that accesses Oracle locally without having to deploy to development server.
Problem is that I can't figure out how to do something similar with UME. I don't want to duplicate the UME on every developer's machine and I don't want to have them deploy their code to development server each time they want to test. Obviously, they'll need to deploy to development server eventually but we like to do our testing locally first.
Sorry for the long post but I wanted to give as much info as possible. Please let me know if you have any questions and I'll be glad to clarify/elaborate.
Thanks in advance for any help.
David.

Hi David,
I don't have any documentaion about the Web Service.
However, consuming it is like consuming any other Web Service in Web Dynpro:
Models -> Create Model -> Import Web Service Model
Select WSDL Source -> Local File System or URL
Enter WSDL: <b>http://<portal>:<port>/irj/servlet/prt/soap/UMWebService?style=rpc_enc </b>
This works in EP6 SP16 and I guess will work on other versions as well.
See attached snapshot for methods.
http://img260.imageshack.us/img260/2788/umewebserviceot9.jpg
Hope it helps,
Omri

Access Visitor entitlements programmatically

Similar Messages

Maybe you are looking for