Authorized Roles

Question

Authentication type: JAAS
Use Role-based Authorization: checked
Authorization Type: JAAS
We have an application that will be accessed by users with role A in "Edit mode" and users with role B in "Query Mode". Role A also has sub role C. (meaning all users with role C will have access to role A as well)
What we have done so far:
OID is set up with all three roles A, B, C in the hierarchical order
web.xml has all three roles defined
Application Definition editor for the view has the following values:
Authorized Roles/Permissions A, B
Insert Allowed EL Expression #{jhsUserRoles['A']}
Update Allowed EL Expression #{jhsUserRoles['A']}
Delete Allowed EL Expression #{jhsUserRoles['A']}
When a user with role "C' logs in they are not able to see the page. But when I include C in the Authorized Roles/Permissions like this
Authorized Roles/Permissions A, B, C it works.
My question is since role C is a subrole of A won't it automatically pick up that permission? Is hierarchical role structure not supported in Jheadstart?
Thanks,
-Sree

Answer 1

Sree,
Hierarchical role structure is not supported in Oracle's JAAS implementation, and subsequently not in JHeadstart (all we do is using the JAAS API's for this type of security).
Steven Davelaar,
JHeadstart Team.