Best practices TopLink Mapping Workbench multi-user + CVS?

This might be a very important issue, in our decision whether or not to choose TopLink --
How well is multi-user development and CVS supported when using the TopLink Mapping Workbench? Are there best practices regarding this use case?
Thanks.

We have no problem with the workbench and CVS. Only a couple of our developers are responsible for the mappings so we havn't really run into concurrent edits. It's pure XML so a decent mergetool with XML support should let you resolve conflicts pretty easily.

Similar Messages

Vulnerability - Oracle toplink mapping workbench password algorithm

Could someone from Oracle post security contact info. This is regarding a possible vulnerability in TopLink referred to in this posting:
http://marc.theaimsgroup.com/?l=bugtraq&m=107531028325112&w=2
I would like to know Oracle's response to this item before I publish a report to our clients.
Thanks,
Mark Hoffman

It has come to our attention that a 3rd party has published the algorithm used to obfuscate a database password stored in the runtime configuration file (project.xml or java source file) generated by the TopLink Mapping Workbench version 9.0.3.
This database password is NOT used when TopLink is using an application servers database connection pool and this issue does not apply. In this case TopLink uses a specified data source name and the application server manages the database password.
For those not using the app server connection pool, the obfuscation is not meant to offer encryption protection for the password stored in the file. It is a mechanism meant to make the password in the file unreadable to the naked eye. It is not a replacement for proper file permission and access control to protect the file.
It is an optional convenience feature that customers have requested as they have found it to be useful during development and internal testing. The only way the password is saved in the file is if the option that is explicitly marked Save Password (Unencrypted) is used.
For encrypted security protection using technology such as Java Cryptography Extension (JCE), the unencrypted password can be set using APIs provided in the TopLink runtime libraries. A code example follows:
boolean shouldLoginSession = false;
DatabaseSession session = null;
session = (DatabaseSession)SessionManager.getManager().getSession("MySessionName", shouldLoginSession);
String password = //retrieve the password as an unencrypted string from somewhere
session.getLogin().setPassword(password); //note this assumes that the user is already set in the project
session.login();
Guidelines:
1.     If you are using the application servers database connection pool, this issue does not apply. TopLink simply specifies a data source name and the application server manages, stores and encrypts the password.
2.     If you are not using the application servers database connection pool, use the optional Mapping Workbench feature to store the password in the project.xml or java source file for development or internal testing purposes only if there is proper file permission and access control to protect the file.
3.     For deployment or unsecured development environments utilize the TopLink APIs provided that allow secure password encryption technology to be used.
This issue only applies to version 9.0.3 and prior; in 9.0.4 the TopLink Mapping Workbench uses JCE to encrypt the file.
Regards,
Dennis Leung
Oracle Corp.

What oracle best practices in mapping budgeting to be implement at item

Dear Consultant's
Really i need you values Consultantancy
What oracle best practices in mapping budgeting to be implement at item category level or item level
I want to check fund at encumbrance account according to item level
Case:
I have there item category
One is Computer's items
Tow is printer's items
Third is food's item's
I want to implement my budget on item category level
Example:
I want my purchase budget for item with printer's type not exceed 30000USD
And For item with type food's not exceed 45000usd
How to map this in oracle application
The modules implemented on my site
(GL, AP, AR, INV, PURCHASING, OM)
Please give me the oracle best practice that handle this case
Thanks for all of you

Hi,
It is really difficult to have Budgetary Control on Inventory Items in Average Costing enviornment as you can have only one Inventory Account at the Inventory Organization level.
You have to modify your PO / Requisition Account Generator to populate the Encumbrance Account in PO / Requisition based upon item category. Moreover, the "Reverse Encumbrance" flag in your Inventory Org needs to be unchecked so that the encumbrances are not revered when the goods are received.
Gajendra

Best practice to set up the user authorization

Dear expert,
I have a question regarding the user authorization access. I've attend the BOE training but I'm still blur in term of user authorization planning. Currently, I have around 50 named users that need to access the BOE server. But the certain user will be restricted to access to certain folders or reports. May I know what is the best practice to set up the user authorization access? Should I set up first in the development machine and once its firm, then I migrate it to production machine..or is there any steps that I need to follow...?
Really appreciate if you can let me know on what should I look into first before set up the authorization. Is there any doccument that I can referring to..?
Thanks & Regards,
-Syahida-

Create User Group for each folder (for eg. Sales/Marketing etc) and also based on the type of access you want to provide.
Like Sales VOD/ Sales View/Sales Schedule, and add users to the User Group based on the type of rights you want to provide them. Then add the User Group to respective report folders.
First deploy it in the Development environment, once you have everything finalized then you can replicate the same to QA and Prod environment by migration. Also make sure that in Development environment developers will have full control to develop/add reports to folders, you have to restrict that in QA & Prod environment.

Toplink mapping workbench

I am trying to download the Toplink Mapping workbench and cannot locate it on Oracle website. Can anyone let me know where I can download it from? I am just going around in circles.

The Workbench is included in the TopLink download available by clicking on the red "Free Download" button on the TopLink OTN homepage (http://www.oracle.com/technology/products/ias/toplink/index.html).
Once you've downloaded the .zip you can find info on configuring the Workbench in the installation instructions (http://www.oracle.com/technology/products/ias/toplink/doc/10131/install/install.html).
--Shaun

Best Practice: Deploying Group Policy to Users on different OUs

Greetings, everyone! I am needing some advice on how to deploy some group policy objects to specific users stored on different OUs.
Let me set the stage: I work for a large school district, and have recently taken over the district's career center. The idea behind the career center is that students from different high schools around the city come in to take classes based on their choice
of career, such as radio broadcasting or auto mechanic and such. The AD structure is set up so that each school has their own OU. When a user (staff, student, etc.) is assigned to a school OU, they automatically are added to
their school's security group (i.e. EASTHIGH-STUDENT), and that when any user moves from one school to another, we have to move their AD account to that school's OU, which will remove the security group from the old school and apply the new school
security group.
For the career center, since we have students coming from different buildings every day, rather than trying to find a way to move their AD account from their high school OU to the career center OU, the previous techs created generic accounts (such as tv001,
tv002, etc.) in AD and stored them in the career center OU. This way, teachers can assign students that particular generic account so that they can access the drives and printers from the career center, as well as access the career center network
drives while they are at their home high school.
Since I have moved to the career center, and apparently I have more knowledge about group policy than most of the techs in the district, the district system engineers want me to remove all of the generic accounts from the career center OU, and have students
use their own AD accounts. Obviously I also want to do this since the generic accounts are very confusing to me, but I'm trying to figure out the best way to do this.
For simplicity sake, I'm just going to start off by figuring out how to set up a group policy for mapping the career center drives. Now, I obviously know that the best way would be to create security groups for each career area, and that we would need
to add students to those groups so that only those particular students would get the GPO for the career center, but my question is where would I like the group policies to? Do I need to link it at the root of the domain so that every OU is hit?
Just curious about this.
Thanks!

Don't link it to the root.... apply the drive mapping as a policy at the OU or you could apply the drive mapping using Group Policy Preferences using security group targeting... .I would also strongly recommend you check out my articles
Best Practice: Active Directory Structure Guidelines
– Part 1
Best Practice: Group Policy Design Guidelines – Part 2
Hope it helps...

Best practice for select access to users

Not sure if this is the correct forum to post, if not then let me know where should I post.
From my understanding this is the best forum to ask this questions.
Are you aware of any "Best Practice Document" to grant select accesses to users on databases. These users are developers which select data out of database for the investigation and application bug fix.
From time to time user want more and more access to different tables so that they can do investigation properly.
Let me know if there exists a best practice document around this space.
Asked in this forum as this is related to PL/SQL access.

Welcome to the forum!
Whenever you post provide your 4 digit Oracle version.
>
Are you aware of any "Best Practice Document" to grant select accesses to users on databases. These users are developers which select data out of database for the investigation and application bug fix.
From time to time user want more and more access to different tables so that they can do investigation properly.
Let me know if there exists a best practice document around this space.
>
There are many best practices documents about various aspects of security for Oracle DBs but none are specific to developers doing invenstigation.
Here is the main page for Oracles' OPAC white papers about security.
http://www.oracletechnetwork-ap.com/topics/201207-Security/resources_whitepaper.cfm
Take a look at the ones on 'Oracle Identity Management' and on 'Developers and Identity Services'.
http://www.dbspecialists.com/files/presentations/implementing_oracle_11g_enterprise_user_security.pdf
This paper by Database Specialists shows how to use Oracle Identity Management to limit access to users such as developers through the use of roles. It shows some examples of users using their own account but having limited privileges based on the role they are given.
http://www.dbspecialists.com/files/presentations/implementing_oracle_11g_enterprise_user_security.pdf
And this Oracle White Paper, 'Oracle Database Security Checklist', is a more basic security doc that discusses the entire range of security issues that should be considered for an Oracle Database.
http://www.oracle.com/technetwork/database/security/twp-security-checklist-database-1-132870.pdf
You don't mention what environment (PROD/QA/TEST/DEV) you are even talking about or whether the access is to deal with emergency issues or general reproduction and fixing of bugs.
Many sites create special READONLY roles, eg. READ_ONLY_APP1, and then grant privileges to those roles for tables/objects that application uses. Then that role can be granted to users that need privileges for that application and can be revoked when they no longer need it.
Some sites prefer creating special READONLY users that have those read only roles. If a user needs access the DBA changes the password and provides the account info to the user. When the user has completed their duties the DBA resets the password to something no one else knows.
Those special users have auditing on them and the user using them is responsible for all activity recorded in the logs during the time the user has access to that account.
In general you grant the minimum privileges needed and revoke them when they are no longer needed; generally through the use of roles.
>
Asked in this forum as this is related to PL/SQL access.
>
Please explain that. Your question was about 'access to different tables'. How does PL/SQL access fit into that?
The important reason for the difference is that access is easily controlled thru the use of roles but in named PL/SQL blocks roles are disabled. So those special roles and accounts mentioned above are well-suited to allowing developers to query data but are not well-suited if the user needs to execute PL/SQL code belonging to another schema (the app schema).

WCEM Best Practice deployment in a multi CRM Landscape

Hi SCN
Im looking for advice in relation to best practice deployment of WCEM. Specifically in a multi CRM landscape scenario.
Do best practices exist?
JR

Look into using NWDI as your source code control (DTR) and transport/migration from dev through to production. This also will handle the deployment to your dev system (check-in/activate).
For unit testing and debugging you should be running a local version (NWDW). This way once the code is ready to be shared with the team, you check it in (makes it visible to other team members) and activate it (deploys it to development server).
We are currently using a separate server for WD applications rather than running them on the portal server. However, this does not allow for the WD app to run in the new WD iView. So it depends on what the WD app needs to do an have access to. Of course there is always the Federated Portal Network as an option, but that is a whole other topic.
For JCo connections, WD uses a connection name and this connection can be set up to point to different locations depending on which server it is on. So on the development server the JCo connection can point to the dev back-end and in prod point to the prod back-end. The JCo connections are not migrated, but setup in each system.
I hope this helps. There is a lot of documentation available for NWDI to get you started. See: http://help.sap.com/saphelp_erp2005/helpdata/en/01/9c4940d1ba6913e10000000a1550b0/frameset.htm
-Cindy

Best practices for defining Environment Variables/User Accounts in Linux

Hello,
After reading throught the Quick Install guide for 10gR2 on x86_64 Linux, I see that it is not recommended to define ANY variables in .bash_profile.
I'm hoping to get a Best practices approach for defining environment variables - right now we use the oracle linux account for administration including sql*plus. So, where should the myriad variables be defined? Is it important enough to create a user account in linux to support best practices?
What variables, exactly, should be defined? It seems that LD_LIBRARY_PATH is no longer being used?
Thanks in advance
Doug

Something that I've done for years on unix/linux boxes is to create a seperate environment variable setup file for each instance on the box. This would include things like ORACLE_HOME, ORACLE_SID, etc. Then I would create an alias in my .bash_profile that would execute this script. As an example, I would create a orcl.env file that would hold all of the environment variables for this instance. Then in my .bash_profile I would create a line like the following:
alias orcl=". $HOME/orcl.env"
Then from anywhere you could type orcl and you would set your environment to connect to that database.
Also, if you are using 10g, something else that is really nice if you are using sqlplus, and you connect to different databases without starting a new sqlplus session is to set a parameter in your $ORACLE_HOME/sqlplus/admin/glogin.sql file:
set sqlprompt "_user 'at' _connect_identifier >"
This will automatically change your command prompt to look like this:
RALPH at ORCL >
if you connect as GEORGE, your prompt will immediately change to :
GEORGE at ORCL >
This way you can always know who and where you are connected to.
Good luck!

TopLink Mapping WorkBench - Interfaces

Hi,
I am using toplink workbench version 9.0.4.5 ,Oracle DB 10g(9.0.4),jdk version 1.4.2
I get an issue with interfaces in mapping workbench. When I select refresh classes option, the implementors selected for the interfaces are not retained.
Is this the expected behaviour ?
Is there any patch for this problem ?
I had applied patch number 3941343 for this mapping work bench. Is there any other pathces we should be applying to this version ?
Thanks
Priya

I am using 10.1.3.0.1 and for me there are still grave issues with interface management in the WB.
First of all, I get a NullPointerException when clicking the "add" Button on the interface descriptor's implementor list after having refreshed all classes by selecting the project packages and doing "refresh classes" from the context menu. I have to close and restart the WB in order to be able to continue working.
Then, some attributes which are not common among the implementor classes are detected as common query keys.
Lastly, if I use variable one-to-one relationships and de-select some class indicator values, the de-selected implementor descriptors are displayed as selected after workbench restart again, showing me errors about missing class indicator values for selected descriptors (Error 0055).

Best practice in JSTL with multi-dimensional arrays

Hi,
I'm working in a project and I'm trying to convert some code into JSTL way, I have a first.jsp that calls addField(String, String) from fieldControl.jsp:
(first.jsp)
<%@page contentType="text/html"%>
<%@page pageEncoding="UTF-8"%>
<%@ include file="fieldControl.jsp" %>
<html>
<head><title>JSP Page</title></head>
<body>
<%! String[][] list1;
%>
<%
list1 = new String[2][2];
list1[0][0]="first_1";
list1[0][1]="first_2";
list1[1][0]="second_1";
list1[1][1]="second_2";
for (int i=0;i<list1.length;i++){
String html;
html = addField (list1[0], list1[i][1]);
out.println(html);
%>
</body>
</html>
(fieldControl.jsp)
<%@page contentType="text/html"%>
<%@page pageEncoding="UTF-8"%>
<%@ page language="java" %>
<%! public void addField(String name,String label)
return ...
Now for JSTL I've this example from "JSTL pratical guide for JSP programmers" Sue Spielman:
<%@ taglib uri="http://java.sun.com/jstl/core" prefix="c" %>
<html>
<head>
<title>
Display Results
</title>
</head>
<body>
<%-- Create a HashMap so we can add some values to it --%>
<jsp:useBean id="hash" class="java.util.HashMap" />
<%-- Add some values, so that we can loop over them --%>
<%
     hash.put("apples","pie");
     hash.put("oranges","juice");
     hash.put("plums","pudding");
     hash.put("peaches","jam");
%>
<br>
<c:forEach var="item" items="${hash}">
I like to use <c:out value="${item.key}" /> to make <c:out value="${hash[item.key]}" />
<br>
<br>
</c:forEach>
</body>
</html>
and my problem is :
1st - how to use the multi-dimensional array in this way (<jsp:useBean id="hash" class="java.util.HashMap" />) ? because if I use it like this
<% String[][] list1;
list1 = new String[2][2];
list1[0][0]="first_1";
list1[0][1]="first_1";
list1[1][0]="second_1";
list1[1][1]="second_2";%>
<c:out value="${list1}" />
<c:out value="${list1.lenght}" />
I get nothing,
also tryed <c:set var="test" value="<%=list1.length%>" /> and got "According to TLD or attribute directive in tag file, attribute value does not accept any expressions"
2nd hot to make the call to the method addField?
Thanks for any help, I really want to make this project using JSTL, PV

When you are using JSTL, it is best to not put data inside the JSP. Put it inside JavaBeans. Then make calles to the methods in those JavaBeans.
So you should get used to JavaBeans and their requirenments.
Access JavaBeans only through 2 types of methods: getters and setters.
Getters are used to "get" values (properties) from the bean, and always have the form
public Type getPropertyName(void)
That is, they are public, return some value, start with the exact string "get" end with the name of the property (first letter of the property name capitalized) and have a void (empty) argument list.
For example, this is a good signature to get HTML from a bean:
public String getHtml()
Setters are used to assign values to a bean. They always have the form
public void setPropertyName(Type value)
That is, they are public, do not return anything, start with the string "set", end with the name of the property (first letter capitalized), and take a SINGLE parameter.
public void setHtml(String value)
Also, JavaBeans must have a no argument constructor and need to be Serializable.
The way I would approach this would be to create a JavaBean that holds the two dim array for you, and has a getter that returns a list of all the formatted html.
package mypack;
import java.util.List;
import java.util.ArrayList;
public class DataFormatterBean implement java.io.Serializable {
private String[][] list;
public DataFormatterBean() {
    list = new String[2][2];
    list[0][0]="first_1";
    list[0][1]="first_2";
    list[1][0]="second_1";
    list[1][1]="second_2";
public List getHtml() {
    List outputHtml = new ArrayList(list.length);
    for (int i = 0; i < list.length; i++) {
      String html = addField(list[0], list[i][1]);
outputHtml.add(html);
return outputHtml;
private addField(String a, String b) { .. do work .. }
Then, the JSP would look like this:
<jsp:useBean id="dataFormatter" class="mypack.DataFormatterBean"/>
<c:forEach var="htmlString" items="${dataFormatter.html}">
<c:out value="${htmlString}"/>
</c:forEach>Once you start thinking in terms of having JavaBeans do your work for you JSTL is so much easier... and it gets even easier when you start to delve into custom tags.

Best Practice for managing Groups and Users

We want to create a Corporate Portal for the Department and it's Organizations. We want to have one Portal Public page as the main entry for all our users. When a user login, he will be re-direct to is Organization Portal page.
I need to find a good document, a case study if possible, on how to define my Groups in OID to achieve this. I need a document that explain how to setup and manage Groups for a Corporate Portal.
Thank you!

Hi!
The Portal Admin Guide gives a good overview about the groups administration.
I don't know about case studies that address your problem.
When you have different home pages for different groups you can administer this with the Portal Group Profile portlet in the admin section of Portal.
cu
Andreas

Using Java 1.5 with TopLink Mapping Workbench 10g(9.0.4.9) - Exception

We're getting a ExternalClassNotFoundException when refreshing classes in 10g(9.0.4.9) workbench. The classes were recently compiled in JAVA 1.5. We have just migrated from RAD6 using Java 1.4 to RAD8 using Java 1.5. Is there a way to use this verion of the workbench with JAVA 1.5? Or is our only alternative to upgrade to a later version on the workbench.

I strongly suggest to upgrade to AS 10.1.3 to get this.
Think of future support of AS 9.0.4. You will get not critical patch updates anymore.
--olaf

Best practices: Invoking external webservices with user credentials

Hello Experts,
I just need to store and maintain a couple of user credentials when invoking external web servcies. I was thinking of storing them in system-jazn-data.xml as I thought it was easier to change the password due to policy requirements through the AS control.
But how do I read the encrypted password and pass it to the invoked partner link in BPEL ?
Any other suggestions ?
Thanks
Ravi
P.S; I was thinnking a DB table would be too much just for a couple of users.

you can use deployment descriptors in BPEL process to store these variables and pass them

Best practice for low bandwidth end-users

Hey guys,
I'm new to CS and am about halfway through my planning stages for a web app.
My end users will be predominantly on 256k-512k connections (yeh I know it sucks, but this is regional/rural Australia) and a fairly large proportion of those are going to be on satellite which is incredibly latent.
Does anyone have some tips on keeping it lean and mean regarding coding or have any experience's they'd mind sharing?
Cheers

At JavaOne, I attended a great technical session on extreme web caching. He talked about ways to make sure the browsers cache the static information, such as images.
Web Caching is very important for high traffic, high performance web site but few people know all the professional-level strategies. In this talk I'll share some of the tricks of the trade, including advanced tips from Yahoo's Mike Radwin.
To get a good intro to cross-browser web caching techniques check out the caching tutorial at www.mnot.net.

Best practices TopLink Mapping Workbench multi-user + CVS?

Similar Messages

Maybe you are looking for