Dynamic User,Role,Group rather than use jazn.xml

Hi everyone
For Jdev 11..
can anybody tell me how to make application wich can make user,group,role dynamically...
rather than use jazn.xml...
I thought if i use jazn.xml for register user and group its very static...
I cannot make it dinamycally....
I read OPSS and I cannot found the idea behind it...
thanks...

Hi,
You can achieve this by using a sql authentication provider. It gets the users and their roles & credentials from the db tables which you can configure in WLS. In JSF, you can create a creation form based on the table (which you configured for authentication), which can be used for the users to register.
Check out this doc for more information.
Regards,
Arun

Similar Messages

Programatically creating users, roles and insert them into Jazn xml

Hi All,
I am using ADF 11G and ADF BC to develop my application. Whenever a user is created an entry will go into OID and into DB. Admin will apply the roles and users for that roles through application. Once the administrator assigns the roles, the user need to see the appropriate menus based on the roles assigned.
If I use ADFSecurity, then I need to redeploy the application each and everytime an user is created and a role assigned to it. But I have to avoid the redeployment step. When ever admin assigns a role while approving the user, the same should be reflected in Jazn, so that I can use the securityContext to generate menus dynamcally.
Is there a way to do programatically the below:
1. Creating roles
2. Assigining Users
I want to use the functionality of ADFSecurity but programatically.
Any information/links/guidance is much appreciated.
Thanks,
Morgan.

Morgan,
You can configure WLS to use OID instead of jaxn.xml file.
[url http://download.oracle.com/docs/cd/E14571_01/core.1111/e10043/toc.htm]The security guide should be good reading for you.
Best,
John

Can I install the online version rather than using my dvd? it successfully installed (up to a point) that way, it just wont accept my serial number for some reason. my dvd isnt working properly.

Can I install the online version rather than using my dvd? it successfully installed (up to a point) that way, it just wont accept my serial number for some reason. my dvd isnt working properly.

If it gets far enough to reject your serial number, it won't help to download it. It must have installed ok.
What is the message you get (DON'T tell us the serial number!!)?
Does it mention a "qualifying product" by any chance?

How can I trash a large number of Emails quickly from my iPod touch rather than using the one-at-a-time Edit method?

How can I trash a large number of Emails quickly from my iPod touch rather than using the one-at-a-time Edit method?

Once you tap on edit, you can select multiple emails, the tap archive.

Firefox 4 is not compatible with the skin i had been using for my browser, old factory black... i would prefer to keep this skin rather than use firefox 4... how can i revert back to the previous version of firefox?...

''Duplicate post, continue here - [https://support.mozilla.com/en-US/questions/816154]''
firefox 4 is not compatible with the skin i had been using for my browser, old factory black... i would prefer to keep this skin rather than use firefox 4... how can i revert back to the previous version of firefox?...

Older versions of Firefox are available here:
http://www.mozilla.com/en-US/firefox/all-older.html

I have created a Muse site for a client that wishes to host with Business Catalyst. How do I publish the site with their account rather than using one of my free sites?

I have created a Muse site for a client that wishes to host with Business Catalyst. How do I publish the site with their account rather than using one of my free sites? This is so I can keep my free ones for personal projects but also so they can pay for their own hosting. I am happy to set it all up for them but not sure what to do.

Hi
You can use their BC login details and use them , which on publish the site will be under their account.
Please change the BC login from Edit > Preferences > Publish > Switch Accounts , for Mac it would Adobe Muse > Preferences
Thanks,
Sanjit

[svn:fx-3.x] 9493: Applying patch (SDK-22435) submitted by Aaron Boushley which updates ObjectUtil to use toXMLString rather than toString for XML objects .

Revision: 9493
Author:   [email protected]
Date:     2009-08-23 16:09:56 -0700 (Sun, 23 Aug 2009)
Log Message:
Applying patch (SDK-22435) submitted by Aaron Boushley which updates ObjectUtil to use toXMLString rather than toString for XML objects.
QE notes: None
Doc notes: None
Bugs: SDK-13919
Reviewer: N/A
Tests run: Checkin
Is noteworthy for integration: No
Ticket Links:
    http://bugs.adobe.com/jira/browse/SDK-22435
    http://bugs.adobe.com/jira/browse/SDK-13919
Modified Paths:
    flex/sdk/branches/3.x/frameworks/projects/framework/src/mx/utils/ObjectUtil.as

[svn:fx-trunk] 7120: Switched to using "use namespace mx_internal" rather than using explicit namespace scoping (e.g., mx_internal::foo) in RichEditableText and its related classes.

Revision: 7120
Author:   [email protected]
Date:     2009-05-19 23:46:06 -0700 (Tue, 19 May 2009)
Log Message:
Switched to using "use namespace mx_internal" rather than using explicit namespace scoping (e.g., mx_internal::foo) in RichEditableText and its related classes.
Removed stale import statements.
QE Notes: None
Doc Notes: None
Bugs: None
Reviewer: Carol
Modified Paths:
    flex/sdk/trunk/frameworks/projects/flex4/src/spark/components/TextArea.as
    flex/sdk/trunk/frameworks/projects/flex4/src/spark/components/supportClasses/TextBase.as
    flex/sdk/trunk/frameworks/projects/flex4/src/spark/primitives/RichEditableText.as
    flex/sdk/trunk/frameworks/projects/flex4/src/spark/primitives/supportClasses/RichEditable TextContainerManager.as

I'm more of a 1.3 chick myself, but the words are the same just in a different language.
1. Is Tomcat running?
2. Have you configured the ajp13 connector on 8009 in Tomcat? (Should it be ajp13 for Apache 2.0? - I really must upgrade)

Notifications user system GUID rather than ID Defined in XML

I've been working on creating, and sealing a set of management packs that anyone could import and use, and I've hit a bit of a snag. There are a number of things in the management pack that seem to be expressed using a system GUID rather than the ID defined
in the management pack. To give an example, inside one of the management packs there is a template named with the ID "Template_2189ec1298d647a5b971c5429e72a04e". When this template is referenced by a notification workflow, the workflow uses
a system GUID to reference it instead. It seems as though, when a management pack is imported, the system creates all of the objects within in, so these system GUIDs are not the same and cannot be predicted. I'm having the same issue with Support Groups and
other things as well.
In the definition of my Notification Channel for example, one of the workflow parameters is the TemplateID the notification should use to sent the alert (Note <Item>):
<WorkflowArrayParameter Name="TemplateIds" Type="string">
<Item>Template_2189ec1298d647a5b971c5429e72a04e</Item>
</WorkflowArrayParameter>
The alert is also dependent on Support group (note the <value>):
<Expression>
<SimpleExpression>
<ValueExpression>
<Property State="Post">$Context/Property[Type='WorkItem!System.WorkItem.Incident']/TierQueue$</Property>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>{cd712f91-a26b-8ff8-133d-36f9f4b40d46}</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
I built my management packs, and tried to move them to a new system, they imported no problems now that I've sealed them, but when I went in and looked the template for the notification channel was blank, and since the management pack is sealed now, I can't
change it. I thought it was odd, so I referenced my XML, and I used this to get the ID of all the templates, and I noted... now they all seem different now that I've imported them into the new system:
foreach ($template in (Get-SCSMObjectTemplate))
echo $template.Id
echo $template.Name
echo $template.Description
I realized, when you import the management pack the first time, it must created GUIDs for all these things... is there a way to within the management pack reference the ID I can define, rather than the system GUID that's impossible to fix? I'm going to look
into writing a script that uses smlets to correct all this information and update the MP once it's been imported the first time, but that seems like a bit of a hack, there must be a way to do this? Anyone find elegant solutions to this problem that didn't
involve writing a fancy installer script for their management packs?

I'll give that a try, I tried just the MP reference and the error it gave complained it expected a GUID in a particular format.
A bunch of them are notifications that notify "affected user" or other internal references, that shouldn't need to change, the ones that go to people, or groups will have to be in an unsealed management pack. Initially, my goal was just to try
to get as much as I could into a few management packs as possible to avoid having a large amount of management packs, more it's just looking like this isn't possible.
I'm looking at breaking things down like this:
Incident Customizations
Incident Customizations Overrides
Service Request Customizations
Service Request Customizations Overrides
Work Item Customizations (storing some things common to all work items, like urgency)
Service Catalog
Notifications
So, my initial hope was to avoid splitting out ROs and SOs, putting any changes that need to be made quickly into the Override MPs. What this means, is that my solution can be implemented, and then customized without making changes to the core MPs directly
in PRD, then I have a promotion process. I dislike changing things in PRD on the fly, and would prefer a solution that forced people to use a promotion process, but it's looking like with Notifications, ROs, and SOs, it's just not possible.
Regardless of whether I'm going to seal this management pack or not, I'd like to avoid manually fixing every single Notification, or anything that references one of these internal GUIDs every time I implement this in a new system, since the possibility is
totally there for the MP name to be used instead, I'm confused why that isn't the default behavior.

Dynamic user/role management

I'm currently working with WebLogic 6.1 and looking into doing what seems to be
a standard piece of development work, specifically dynamic user management. I
need the ability to create/modify a user and define them as members of security
role(s) from within my application, and not through the Weblogic adminstrative
console. From what I've read the only option is to create a custom RDBMS
security realm. Does anyone know of any other available options or is this it?
If anyone has implemented a custom RDBMS security realm I'd be interested in any
feedback about your experience doing so. Such as performance issues or
deficiencies of this security model. Thanks in advance.
- Rich

Cameron -
Thanks for your input. Clearly LDAP will not cut it for what I'm trying to do.
I really need the ability to manage these user accounts from within the
application not from a separate administrative tool. A custom RDBMS realm seems
the only option at this point. I looked at some of the vendors you mentioned,
but they do not seem to offer the type of solution I'm looking for. These
vendors seem to manage authorization policies which will keep programatic
security out of your business logic. I did not see where they would allow you to
create and manage user accounts/groups/ACL's. If there is one that does I'd
definitely like to take a look at it. Thanks again.
- Rich
Cameron Purdy wrote:
First, if you are using LDAP then you typically use directory management
tools, not an application, to manage security.
Second, there are security products that work with J2EE from vendors such as
Entegrity, IBM, Netegrity, et al. Basically all of them provide advanced
features like what you describe.
Third, if you must manage stuff from within the app, you need to use a
ManageableRealm implementation. See the Weblogic docs to see what I mean.
Peace,
Cameron Purdy
Tangosol, Inc.
Clustering Weblogic? You're either using Coherence, or you should be!
Download a Tangosol Coherence eval today at http://www.tangosol.com/
"Rich Naylor" <[email protected]> wrote in message
news:[email protected]...
I'm currently working with WebLogic 6.1 and looking into doing what seemsto be
a standard piece of development work, specifically dynamic usermanagement. I
need the ability to create/modify a user and define them as members ofsecurity
role(s) from within my application, and not through the Weblogicadminstrative
console. From what I've read the only option is to create a custom RDBMS
security realm. Does anyone know of any other available options or is thisit?
If anyone has implemented a custom RDBMS security realm I'd be interestedin any
feedback about your experience doing so. Such as performance issues or
deficiencies of this security model. Thanks in advance.
- Rich

Obtaining url patterns for a user Role/Group

I am looking for a way to find out how to obtain a the list of accessible urls (url
patterns) for a role/group defined in weblogic.
I have gotton as far as if checking if a user is in a group using: javax.ejb.SessionContext
isCallerInRole(java.lang.String roleName)
After checking if a user is in a role/group I want to access the url pattern authorised
for a particular role under weblogic.
Can this be done.

I am looking for a way to find out how to obtain a the list of accessible urls (url
patterns) for a role/group defined in weblogic.
I have gotton as far as if checking if a user is in a group using: javax.ejb.SessionContext
isCallerInRole(java.lang.String roleName)
After checking if a user is in a role/group I want to access the url pattern authorised
for a particular role under weblogic.
Can this be done.

Field GROUPS not a member of INPUT when adding user to group in sap using BAPI_USER_CHANGE

when trying to add User to Group using BAPI_USER_CHANGE in the Import Parameters GROUPSX = X
I'm getting following error :
com.sap.conn.jco.JCoRuntimeException: (127) JCO_ERROR_FIELD_NOT_FOUND : Field GROUPS not a member of INPUT
BAPI_USER_CHANGE function work correctly for other parameters such as ADDRESSX, DEFAULTSX, PASSWORDX, LOGONDATAX, ALIASX
But in case GROUPSX I am getting above error.
Also I could able to add all above attributes including GROUPSX to user using sap logon. so it should be possible from BAPI as well.
Any input will be appreciated.

My bad,
I meant GROUPS is not an input parameter but a table parameter.
This is the ABAP definition of the BAPI:
function bapi_user_change.
*"*"Lokale Schnittstelle:
*" IMPORTING
*"     VALUE(USERNAME) LIKE BAPIBNAME-BAPIBNAME
*"     VALUE(LOGONDATA) LIKE BAPILOGOND STRUCTURE BAPILOGOND OPTIONAL
*"     VALUE(LOGONDATAX) LIKE BAPILOGONX STRUCTURE BAPILOGONX
*"       OPTIONAL
*"     VALUE(DEFAULTS) LIKE BAPIDEFAUL STRUCTURE BAPIDEFAUL OPTIONAL
*"     VALUE(DEFAULTSX) LIKE BAPIDEFAX STRUCTURE BAPIDEFAX OPTIONAL
*"     VALUE(ADDRESS) LIKE BAPIADDR3 STRUCTURE BAPIADDR3 OPTIONAL
*"     VALUE(ADDRESSX) LIKE BAPIADDR3X STRUCTURE BAPIADDR3X OPTIONAL
*"     VALUE(PARAMETERX) LIKE BAPIPARAMX STRUCTURE BAPIPARAMX
*"       OPTIONAL
*"     VALUE(COMPANY) LIKE BAPIUSCOMP STRUCTURE BAPIUSCOMP OPTIONAL
*"     VALUE(COMPANYX) LIKE BAPIUSCOMX STRUCTURE BAPIUSCOMX OPTIONAL
*"     VALUE(SNC) LIKE BAPISNCU STRUCTURE BAPISNCU OPTIONAL
*"     VALUE(SNCX) LIKE BAPISNCUX STRUCTURE BAPISNCUX OPTIONAL
*"     VALUE(BACK_DISTRIBUTION) LIKE BAPIFLAG STRUCTURE BAPIFLAG
*"       DEFAULT SPACE
*"     VALUE(PASSWORD) LIKE BAPIPWD STRUCTURE BAPIPWD OPTIONAL
*"     VALUE(PASSWORDX) LIKE BAPIPWDX STRUCTURE BAPIPWDX OPTIONAL
*"     VALUE(ADDCOMX) LIKE BAPIADCOMX STRUCTURE BAPIADCOMX OPTIONAL
*"     VALUE(REF_USER) LIKE BAPIREFUS STRUCTURE BAPIREFUS OPTIONAL
*"     VALUE(REF_USERX) LIKE BAPIREFUSX STRUCTURE BAPIREFUSX OPTIONAL
*"     VALUE(ALIAS) TYPE BAPIALIAS OPTIONAL
*"     VALUE(ALIASX) LIKE BAPIALIASX STRUCTURE BAPIALIASX OPTIONAL
*"     VALUE(GROUPSX) LIKE BAPIGROUPX STRUCTURE BAPIGROUPX OPTIONAL
*"     VALUE(UCLASS) TYPE BAPIUCLASS OPTIONAL
*"     VALUE(UCLASSX) TYPE BAPIUCLASSX OPTIONAL
*"     VALUE(EXTIDSX) TYPE BAPIUSEXTIDX OPTIONAL
*"     VALUE(PRODUCTIVE_PWD) TYPE BAPIFLAG-BAPIFLAG DEFAULT SPACE
*" TABLES
*"      PARAMETER STRUCTURE BAPIPARAM OPTIONAL
*"      RETURN STRUCTURE BAPIRET2
*"      ADDTEL STRUCTURE BAPIADTEL OPTIONAL
*"      ADDFAX STRUCTURE BAPIADFAX OPTIONAL
*"      ADDTTX STRUCTURE BAPIADTTX OPTIONAL
*"      ADDTLX STRUCTURE BAPIADTLX OPTIONAL
*"      ADDSMTP STRUCTURE BAPIADSMTP OPTIONAL
*"      ADDRML STRUCTURE BAPIADRML OPTIONAL
*"      ADDX400 STRUCTURE BAPIADX400 OPTIONAL
*"      ADDRFC STRUCTURE BAPIADRFC OPTIONAL
*"      ADDPRT STRUCTURE BAPIADPRT OPTIONAL
*"      ADDSSF STRUCTURE BAPIADSSF OPTIONAL
*"      ADDURI STRUCTURE BAPIADURI OPTIONAL
*"      ADDPAG STRUCTURE BAPIADPAG OPTIONAL
*"      ADDCOMREM STRUCTURE BAPICOMREM OPTIONAL
*"      GROUPS STRUCTURE BAPIGROUPS OPTIONAL
*"      PARAMETER1 STRUCTURE BAPIPARAM1 OPTIONAL
*"      UCLASSSYS STRUCTURE BAPIUCLASSSYS OPTIONAL
*"      EXTIDHEAD STRUCTURE BAPIUSEXTIDHEAD OPTIONAL
*"      EXTIDPART STRUCTURE BAPIUSEXTIDPART OPTIONAL
So the error message is correct, GROUPS is not an INPUT parameter.

Which user role I need to use for import WSM policies?

Hi.
I'm looking for a user role that has the grant for to import new policies in wsm via EM (soaadmin em).
There is a preconfigured user that can do that?
If no, how can I create one new give him the right permission?
Is it possible?
Obviously using the admin one I can made this operation but ADMIN has too many privileges.
Thank you
diego

Hi Colins,
Thanks for your suggestion to create a sample on the APEX. I will do that and will post the problem in the FORUM.
Normally I add my name at the end of each conversation in the forum. I forgot to add one in this thread.
Cheers,
Krishna.

Why do we gor for SAP BW rather than using the other Data Warehouse S/W's

Hi All,
Can any one tell me Why do we especially go for SAP BW, rather than other Warehouse S/W's available in the IT Market.
Plzzzz..... Reply back me to [email protected]
Regards,
Kiran

Hello Kiran Telkar,
How r u ?
1. Multi Dimentional Modelling Concept is available in BW
2. Most of the 3rd party DataBases could be connected to BW
3. Very effective Reporting Solution is given by BW
4. Integration of Transactional Data & Master Data
5. Tight integration with R/3 and the Business Content functionality, which handles core areas & processes.
and more !
Best Regards....
Sankar Kumar
+91 98403 47141

How do I get the session Id associated with a user id rather than using the Servlet request on the iplanet portal server

In com.iplanet.portalserver.session.Session class use the method given below,
public SessionID getID()--->Returns the session ID
If u need to get clientID then use the method given below,
public java.lang.String getClientID()- Returns the client ID in this session

Dynamic User,Role,Group rather than use jazn.xml

Similar Messages

Maybe you are looking for