Adding users programmatically -- almost there

Question

... getting close...
Create this procedure in the PORTAL schema.
It works if you call it when connected as PORTAL, but not when connected as anyone else.
It is throwing a user-defined exception frmo inside WWCTX_SSO, so I am guessing that it is looking at the session context and deciding that the SESSION_USER shouldn't be adding users.
Perhaps a true PL/SQL wiz can pick up the ball and figure out what is going on.
FYI this is sandbox code at its grittiest, so don't even think of pasting it into your application 8^)
create or replace procedure ci_add_portal_user
(uname in varchar2,pwd in varchar2, email in varchar2,lname in varchar2,fname in varchar2,clr_lvl in integer)
as
l_guid varchar2(32);
p_user_id number;
sess dbms_ldap.session;
err_code number;
err_msg varchar2(300);
INVALID_GRP_NAME_EXCEPTION exception;
INVALID_SITE_EXCEPTION exception;
VALUE_ERROR_EXCEPTION exception;
DUPLICATE_GROUP_EXCEPTION exception;
GROUP_NOT_FOUND_EXCEPTION exception;
GROUP_MEMBER_EXCEPTION exception;
GROUP_NOT_UNIQUE_EXCEPTION exception;
USER_NOT_FOUND_EXCEPTION exception;
USER_EXISTS_EXCEPTION exception;
APP_NOT_FOUND_EXCEPTION exception;
NO_MANAGER_EXCEPTION exception;
DUPLICATE_GRANTEE_EXCEPTION exception;
NO_ACCESSIBLE_OBJECT_EXCEPTION exception;
ORG_NOT_EXIST_EXCEPTION exception;
INVALID_PERSON_ID_EXCEPTION exception;
ACCESS_DENIED_EXCEPTION exception;
CIRCULAR_REFERENCE_EXCEPTION exception;
UNEXPECTED_EXCEPTION exception;
USER_NOT_DELETABLE_EXCEPTION exception;
INVALID_ARGUMENT_EXCEPTION exception;
INVALID_AUTH_FUNC_EXCEPTION exception;
LDAP_CONNECTION_EXCEPTION exception;
DEPRECATED_API_EXCEPTION exception;
INVALID_ARGUMENT_EXCEPTION exception;
BEGIN
/* Create SSO User */
begin
l_guid := portal.wwsec_oid.create_user_entry
p_base => portal.wwsec_oid.get_user_search_base,
p_user_name => uname,
p_password => pwd,
p_email => email,
p_first_name => fname,
p_last_name => lname,
p_create_state => null,
p_bind_as_user => false
exception when others then
err_code:=SQLCODE;
err_msg:=SQLERRM;
dbms_output.put_line(' Exception :'||err_code||' '||err_msg);
end;
/* Create Portal User */
begin
p_user_id:=portal.wwsec_api.id_sso(p_username=>uname);
dbms_output.put_line('USER ==>'||p_user_id||' '||portal.wwsec_api.user_name(p_user_id));
exception when others then
err_code:=SQLCODE;
err_msg:=SQLERRM;
dbms_output.put_line(' Exception :'||err_code||' '||err_msg);
end;
begin
portal.wwsec_api.add_user_to_list(p_user_id,portal.wwsec_api.group_id('CI_USR'),0);
portal.wwsec_api.set_defaultgroup(portal.wwsec_api.group_id('CI_USR'),uname);
exception when others then
err_code:=SQLCODE;
err_msg:=SQLERRM;
dbms_output.put_line(' Exception :'||err_code||' '||err_msg);
end;
begin
portal.wwsec_api.add_user_to_list(p_user_id,portal.wwsec_api.group_id('CI_CLR_'||clr_lvl),0);
exception when others then
err_code:=SQLCODE;
err_msg:=SQLERRM;
dbms_output.put_line(' Exception :'||err_code||' '||err_msg);
end;
END ci_add_portal_user;

Answer 1

Andrew,
to add a user to a specific group in the FileRealm, try doing the following:
import java.security.acl.Group;
import weblogic.security.acl.BasicRealm;
import weblogic.security.acl.ManageableRealm;
import weblogic.security.acl.Security;
// Create a user in WebLogic
BasicRealm bRealm = Security.getRealm();
ManageableRealm mRealm = (ManageableRealm)bRealm;
if (null == mRealm) { throw new SecurityException("Security Realm is null");
weblogic.security.acl.User oNewUser = mRealm.newUser("username", "password",
null);
// -- Put the new user into the selected group
Enumeration eGroups = mRealm.getGroups();
Group oGroup = mRealm.getGroup("group name you want to add to");
if (null != oGroup) {
oGroup.addMember(oNewUser);
try { mRealm.save("FileRealm.Properties"); } catch (IOException e) { }
Andrew Dunn <[email protected]> wrote:
Thanks, Mike.
I'm trying to use the Default realm in WLS7.0 (which uses LDAP), so
I'm looking for the classes specific to the Default realm - I assume
BEA provides some, but I can't find them in the docs.
On 2 Dec 2002 10:15:18 -0800, "mike" <[email protected]>
wrote:
You will not find implementing classes in general. The thing is thatthey (classes)
are specific to particular implementation of realm you are using (assumingyou
use 6.x or below, but that is logically true for 7). So you need tofind what
are the classes used in your realm and work with those. If you are usingan implementation
shipped with WLS (eg. FIleRealm or LDAP) you will have to use reflection...
Andrew Dunn <[email protected]> wrote:
How can I add users/groups via the Weblogic API? All I can find in
the documenattion is interfaces, but no implementation classes. How
can I instantiate the classes?
Thanks, Andrew