Does ADF security support sub-roles? If not are there plans to support it?

hi,
I have following scenario: there are dozens of regions and each region has dozen of facilities and each facility dozens of offices.
I would like to setup Office roles to have Query permission only and create a new role OfficeUpdate role that has update permissions for this office data, and at the same time to inherit permissions from Office role (e.g. Query permissions), so if I assign a user to Office role he will be able to query only and if I assign him to OfficeUpdate role he will be able to query and update the office data because privilege will be inherited from Office role.
User can be a member of different offices/facilities/regions. So I would like to, in order to simplify user management, to be able to assign a whole role as a member of another role. By doing this I wouldn't have to assign users to different roles all over again (all users assigned to a sub-role would automatically become members of main role as well) as this is time-consuming.
But it seems that ADF security does not support this. It seems that ADF security can only deal with roles and not sub-roles? Roles and sub-roles are supported by oc4j container but it seems that ADF security does not support it.
I would like first to be sure that my observation is correct, and if yes to find out if there are any plans to support sub-roles in future Jdev releases?
And also if somebody knows, if Acegi or JsfAcegi security supports role-sub-role privilege inheritance?

I created a testcase that excludes ADF Security and the same behavior can be reproduced, so the problem doesn't seem to be with ADF Security but JAZN.
Need to further track this issue, but so far it appears that a member role is not sufficient to authenticate and authorize a container managed constraint as used by ADF Security for authentication. This could be a problem with the embedded OC4J only but also a general problem with settings on the system-jazn-data.xml. This is what I need to further evaluate.
So for now I can't say that this isn't working in ADF Security because its not even getting there
Frank

Similar Messages

  • HT201303 How can I reset my security answers ? I do not remember them, and Apple support just can help me if I remember one o more answers. I already have three Follow-ups: 237312883, 374526499 and 239690719 with no solution.

    How can I reset my security answers ? I do not remember them, and Apple support just can help me if I remember one o more answers. I already have three Follow-ups: 237312883, 374526499 and 239690719 with no solution.

    Reset Security Questions
    Frequently asked questions about Apple ID
    Manage My Apple ID
    Or you can email iTunes Support at iTunes Store Support.
    If all else fails:
      1. Go to: Apple Express Lane;
      2. Under Product Categories choose iTunes;
      3. Then choose iTunes Store;
      4. Then choose Account Management;
      5. Now choose iTunes Store Security and answer the bullet questions, then click
          Continue;
      6. Sign in with your Apple ID and press Continue;
      7. Under Contact Options fill out the information and advise iTunes that you would
          like your security/challenge questions reset;
      8. Click Send/Continue.
    You should get a response within 24 hours by email.
    In the event you are unsuccessful then contact AppleCare - Contacting Apple for support and service.
    Another user had success doing the following:
    I got some help from an apple assistant on the phone. It is kind of round about way to get in.
    Here is what he said to do and it is working for me...
      a. on the device that is asking you for the security questions go to "settings", > "store" >
          tap the Apple ID and choose view"Apple ID" and sign in.
      b. Tap on payment information and add a credit/debit card of your preference then select
          "done", in the upper right corner
      c. sign out and back into iTunes on the device by going to "settings"> "store" > tap the
          Apple ID and choose "sign-out" > Tap "sign -in" > "use existing Apple ID" and you
          should be asked to verify your security code for the credit /debit card and NOT the
          security questions.
      d. At this time you can remove the card by going back in to edit the payment info and
          selecting "none" as the card type then saving the changes by selecting "done". You
          should now be able to use your iTunes store credit without answering the security
          questions.
    It's working for me ...I just have to put in my 3 digit security pin from the credit card I am using.
    Good Luck friends!

  • I have Windows 7, and I am being told that it does not support the newest Ai Illustrator, Are there any other alternate routes I can take to get adobe illustrator and photoshop on my computer? Perhaps an earlier version? Thanks! ~

    I have Windows 7, and I am being told that it does not support the newest Ai Illustrator, Are there any other alternate routes I can take to get adobe illustrator and photoshop on my computer? Perhaps an earlier version? Thanks! ~

    houseofrest,
    According to this page, you can use it for CC:
    Adobe Illustrator CC for Mac, Windows, PC - Tech specs
    Or you can buy CS6:
    http://helpx.adobe.com/x-productkb/policy-pricing/system-requirements-illustrator.html

  • HT1923 iTunes on my Windows Vista has failed to update over several weeks. Attempting uninstal/reinstall according to iTunes support page. Will not uninstall 'Apple Mobile Device Support' - goes to 99% then progress bar unwinds completely. Tried rebooting

    iTunes on my Windows Vista has failed to update over several weeks. Audio will not play out. Attempting uninstal/reinstall according to iTunes support page. Will not uninstall 'Apple Mobile Device Support' - goes to 99% then progress bar unwinds completely. Tried rebooting. Any clues??

    Hey petanque1,
    Thanks for the question. I understand that you are experiencing issues installing iTunes for Windows. The following article outlines the error message you are receiving and a potential resolution:
    iTunes 11.1.4 for Windows: Unable to install or open
    http://support.apple.com/kb/TS5376
    Some Windows customers may experience installation issues while trying to install or open iTunes 11.1.4.
    Symptoms may include:
    "The program can't start because MSVCR80.dll is missing from your computer"
    "iTunes was not installed correctly. Please reinstall iTunes. Error 7 (Windows Error 126)”
    "Runtime Error: R6034 - An application has made an attempt to load the C runtime library incorrectly"
    "Entry point not found: videoTracks@QTMovie@@QBE?AV?$Vector@V?$RefPtr@VQTTrack@@@***@@$0A@VCrashOnOverf low@@***@@XZ could not be located in the dynamic link library C:\Program Files(x86)\Common Files\Apple\Apple Application Support\WebKit.dll”
    Resolution
    Follow these steps to resolve the issue:
    Check for .dll files
    1. Go to C:\Program Files (x86)\iTunes and C:\Program Files\iTunes and look for .dll files.
    2. If you find QTMovie.DLL, or any other .dll files, move them to the desktop.
    3. Reboot your computer.
    Note: Depending on your operating system, you may only have one of the listed paths.
    Uninstall and reinstall iTunes
    1. Uninstall iTunes and all of its related components.
    2. Reboot your computer. If you can't uninstall a piece of Apple software, try using theMicrosoft Program Install and Uninstall Utility.
    3. Re-download and reinstall iTunes 11.1.4.
    Thanks,
    Matt M.

  • Does DPS have GPS functionality? If not do they plan to add it and when?

    Does DPS have GPS functionality? If not do they plan to add it and when?

    Here is the sdk.. https://developers.google.com/maps/. Or do a search on stackoverflow.com and people have some examples of how to use it.

  • Excuse me,I want to know firefox Os V1.3 support IPv6 protocol or not,could you give some support,Thanks.

    Excuse me.
    I want to know firefox Os V1.3 support IPv6 protocol or not,could you give some support,and give me a feedback to my email: [email protected]
    Thanks.

    This is a user to user support forum.  We are all iphone users just like you.
    You are not addressing Apple here at all.
    This is an odd way to ask your fellow iphone users for help. Berating oterh users will not help you.
    "it's too fragile"
    No it is not.  i have never damaged one, nor has anyone I know.
    " U loose data when Ur phone is locked"
    No you don't.  Why do you think this?
    "and there is no customer support!!!  "
    Wrong yet again.  Apple has an 800 number and they have many retail stores and they have support articles that you can access using the search bar. Or you can contact them throgh express lane online
    "but I will go back with Blackberry "
    Please do.
    Good ridance

  • Are there some Font supporting all utf-16 code including all supplementary?

    Are there some Font supporting all utf-16 code including all supplementary code?
    In an application, I need to show some text encoded in utf-16, which is multilingual and
    Have some of supplementary character, so want to know a font to show it correctly? While find nothing from the internet, so anybody can instruct me will be very appreciated!Looking forward to your response, thanks.
    Message was edited by:
    passenger2007

    Probably not. you might find some fonts listed her that support what you are interested in.
    http://www.google.com/search?q=font+that+supports+all+unicode+characters

  • I wanted to ask whether the camera for ipod touch comparable to a digital camera? if not are there apps available that can turn it into a digital camera? i want to buy an ipod touch and i like photography....what should i do?plz suggest

    i  wanted to ask whether the camera for ipod touch comparable to a digital camera? if not are there apps available that can turn it into a digital camera? i want to buy an ipod touch and i like photography....what should i do? plz suggest

    The iPod touch has a very rudimentary camera.  It has only a 0.6 MP resolution, no optical zoom, no flash, etc.   There is no app that can improve this as it is limited by the hardware. So it is not a replacement for a digital camera (nor even for an iPhone whose camera has a 5.0 MP resolution.

  • Does SCCM 2007 R3 support SQL 2014 if not is there any mitigation plan for this

    Hi ,
    As part of Database migration to SQL 2014, wanted to check whether SCCM 2007 R3 support SQL 2014 or not.
    I have a link for SCCM 2012 which tells it does support to SCCM 2012, but in upgrade mode.
    Is there any other approch instead of upgrade on SCCM 2012. 
    Please let us know.
    http://windowsitpro.com/configuration-manager/configmgr-2012-supported-sql-server-2014-only-if-you-upgrade
    Regards
    Sudam Bisi
    CTS

    I doubt CM07 will support SQL 2014, particularly when mainstream support has ended already.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • My computer is a few years old and I understand the One to One membership is only for 1 year. Are there annoy other support options I can purchase?

    My computer is a few years old and my suppost One to One membership is only for 1 year from purchace. Are there any other suppost memberships available for purchase?

    Do you mean physical support for repairs, or just advice? The latter is available free of charge on these forums as well as in Apple Stores.
    Apple Support Options:
    http://support.apple.com/kb/HT2046?viewlocale=en_US

  • Using ADF Security user in role context to change field value

    Hi I was wondering if it was possible to change an input text field value depending on the ADF authentication login values.
    So if the user in role is manager value is dino2dy if it's Boss its Frank Nimphius.
    My idea is that I want the field user to be read only so no one could change it, but since it's a foreign key in the table I need to have values in it for committing to the database.
    Since different users will be accessing the application I want every user to have his user name automatically entered into a read only field. Then commit that value into the database.
    I have ran into some problems so far, as if I put in a straightforward value in a field, and make it read only, when committing I get an error User field needed. As if the field is empty even though I can see the value on the page.
    Hope you guys can help

    Yeah I have tried that but I can only use it for true or false values, I do not know how to use it to change a value. I ve used it to make something read only or disabled depending on the user in role.
    It still wont work if I change the value in the field. It has to be the database value thing in there. As soon as I change it it starts giving me the you need Korisnik error. But I cant put it as a default value in the database because it defeats the purpose.

  • Row Level Security - Data filter - Roles Variable Not working in OBIEE 11.1.1.7.1

    Hi all,
    Previously, we were using OBIEE 11.1.1.5.0 and we were able to assign users to application roles by using the initialization block to assign the ROLES session variables.
    1. My USER_SECURITY table in Oracle database:
    USER_NAME | USER_ID | ROL
    user1       | 1723    | GobalDataRole
    user2       | 1739    | GobalDataRole
    user3      | 1743    | GobalDataRole
    2. The SQL query in my session initialization block:
    select USER_NAME, USER_ID, ROL
    from USER_SECURITY
    where USERNAME = ':USER'
    3. The row-wise initialization option is not checked.
    4. In the Oracle Enterprise Manager Fusion Middleware Control, we created new application role: GobalDataRole and sync with rpd.
    5. The GobalDataRole is used in the RPD to filter the data under permissions --> data filter. GobalDataRole only has access to Country A data.
    6. Result: under my account, also in rpd Manage --> Sessions, user variable details
    User_name , user_id & Rol variable is working fine as expected,
    When we log in as user1, we can see in My Account, user assigned to: BI Consumers; Authenticated Role; GobalDataRole
    When we log in as user2, we can see in My Account, user assigned to: BI Consumers; Authenticated Role; GobalDataRole
    When we log in as user3, we can see in My Account, user assigned to: BI Consumers; Authenticated Role; GobalDataRole
    User1, User2, and User3 are able to see the data correctly according the their data access setup.
    Now, we using OBIEE 11.1.1.7.1 and using the same method, but we not able to assign users to application roles by using the initialization block to assign the ROLES session variables anymore.
    Result:
    User_name & user_id variable is working fine as expected, but the ROl variaible is not capturing the DB value,
    When we log in as user1, we can see in My Account, user assigned to: BI Consumers; Authenticated Role
    When we log in as user2, we can see in My Account, user assigned to: BI Consumers; Authenticated Role
    When we log in as user3, we can see in My Account, user assigned to: BI Consumers; Authenticated Role
    User1, User2, and User3 can see all data (which is wrong) because they are not assigned to the correct application role that sets the data restriction/filter.
    Has anyone encountered the same issue? Any advice on how to solve this?
    Thanks in advance!
    Satheeshkumar P

    Thanks user10615659     ,
    - Yes the variable ROLES available in OBIEE 11.1.1.7.1
    - Tested the init block and variables in offline rpd its working as expected.
    - In online rpd, except ROLES and GROUP variable remaining variables working fine.
    - Verified log file in both online and offline init block testing - the init block execution is successful.
    Thanks

  • HT1689 I tried to purchase an upgrade to a game and it says contact iTunes support. I do not know what section of support I should contact

    I tried to upgrade a game but it says to contact iTunes support. Which support category should I contact?

    Click here and request assistance.
    (73937)

  • Does PSE 11 have chromakey ability if not is there a plug in to add this functionality

    Looking for a way to use PSE 11 for green screen editing.

    Are you talking photos or videos? For stills you can use the magic wand or quick selection tools to select the green background. Then invert your selection so that your subject is selected. You can then place your subject on any background. If you mean video, you will find best advice over on the video forum. Most of us here are photographers.
    Click on the link below and copy and paste your question again. Good luck.
    Video questions: Click here for Premiere Elements Forum

  • Are there any other support options?

    Does anyone know of a legitimate alternative human support option for Firefox, such as telephone, or chat, or direct one on one email, including paid/fee-based, options?
    Thanks,
    SK

    iamjayakumars,
    There are a number. This forum method is cumbersome (though very good, and people are very helpful), and often the elapsed time is too great for the nature or severity and/or urgency of the issues. Then, when you do get an answer, with - refer to such and such link or article, and try it, there are subsequent followups that can occur, again with the wait involved, and another layer of complexity to the problem. I would like at least have direct email with someone, or "someones, ".
    For instance, see my question posted 03/3/13, 7:56 AM -
    "I would like to change my mozilla support user name. Or, delete my account/login and create a new one. How do I do it? "
    It is now 04/06/13, and not resolved, and this is a straightforward one, without complications.
    I've got more complex ones that I would be better served with direct one on one communication. I would pay for it.
    Also, see this question -
    "How can I find/restore inadvertently deleted Bookmarks Folders, Bookmarks, and Bookmarks Toolbar Bookmarks?"
    posted by stevek302 (that is also me), on 3/29/13 10:20 PM. I tried the profile method. but while installing, I chose a different folder/path then the x86 location, which is by design. At first it seemed to work, it was a clean install, without my 20 extensions, and 150 Bookmarks folders, and 100 Bookmarks Toolbar bookmarks. But now the new profile is no longer in Profile Manager. I ran the .exe setup file again, again chose a new folder, it appears to have installed in the new folder, but clicking it and opening it in the new folder, it opens with all the extensions, Bookmarks, etc., from the other Default profile. Now, it's 8 days later, and I still don't have it answered. I would willingly pay x amount a year for email, chat, or phone support, even from a third party company. But, Mozilla could use the funds.
    There are more things constantly coming up. I am a long term user. I really like FF. It is so customizable. I am a layman, not an IT/computer guy, but hopefully towards the higher end of that scale, though self-taught. I want to keep using it, but as I learn more about it and do more with it, more things come up. Right now, using Google, the results page is behaving as though an auto-paging add-on is working. I want to be able to see the related searches at the bottom of the page, but I can't get to click any because the next page endlessly loads as I get down close to the bottom. I have no auto-page extension or plugin, neither enabled, nor disabled. I may have had one sometime, but not for a while. Yet in about:config, there are a bunch of auto-paging lines. Why are they there if its been removed? And the list goes on.
    Thanks,
    SK

Maybe you are looking for

  • Tecra M9 Vista installation network problems

    Hi, Have just got a Tecra M9-136 that I try to install with the English version of Vista Business. Vista refuses to connect to a number of websites: update.microsoft.com www.microsoft.com www.intel.com liveupdate.symantecliveupdate.com The following

  • How to get workflow Item in custom FM ( method )

    Dear Expert, I am developing the workflow for PR release. We don't have the HR module so we are using Z-table for the release agent. I am using the BUS2105 for the workflow. I have created a new method to get the PR release agent and send mail to tho

  • Executing CR HOST script, encountering command not found

    Hi All, I new to writing Host scripts, especially for use within the Applications. I need to go out to an FTP site and grab a file. The FTP portion of the script works fine. The problem I'm encountering is with the execution of regular commands like

  • Change iCloud display name

    I had to rebuild my phone, now my iCloud account is called iCloud and I can't figure out where to change the name to something I would like, it used to be editable, any ideas?  I am running 8.1.3

  • How do I get back to 3.6? 4 says it won't work with my configuration, even though I'm running 10.5.8

    I downloaded Firefox 4 & it overwrote 3.6. F is saying that it will not open with my configuration even though I'm running 10.5.8. How do I find & download 3.6? I'm totally screwed, since I can't seem to import my bookmarks, setting, etc, into Safari