How to configure roles at runtime without changing application code?

Hi,
We have implemented Custom Login Module security for our application. Our requirement is to configure the roles without changing the application code.
Our Authentication Type is 'JAAS With Custom Login Module' and Authorization Type is 'JAAS'.
According to 10.1.3 section of JhsDevGuide1013.pdf, we need to configure the roles in web.xml and also need to give the role in the 'Authorized roles/permissions' section of the group.
We dont want to change the application definition once we go live just for adding roles. That is overhead for us as we may need to configure more roles according to our business requirements, but each time we dont want to change the code and re-deploy the application.
Please let us know the way to meet our requirement.
Thanks in advance.
Thanks & Regards,
Ramakrishna. P

Hello,
The JHeadstart Developers Guide has an excellent chapter about security to answer questions like these.
For example, you could use the JHeadstart based custom security, with datatables, that will enable you to add roles and users at runtime.
Regards,
Evert-Jan de Bruin
JHeadstart Team

Similar Messages

  • How do you make audio fast without changing pitch?

    How do you make audio fast without changing pitch?

    PrPro may have that but I've always just gone over to Audition ... you change speed there, you're given a choice of keeping the pitch the same or allow it to change. Note ... if there's much cha ge in speed the result can be odd.
    Neil

  • Everything on all the webpages are so small, and only take up half the screen. How can I make it bigger, without changing the settings on my computer and by that change the size of everything on my computer.

    Everything on all the webpages are so small, and only take up half the screen. How can I make it bigger, without changing the settings on my computer and by that change the size of everything on my computer.

    The Firefox [https://support.mozilla.com/en-US/kb/Page+Zoom Page Zoom] feature does a domain by domain level of saving the users preferred zoom level settings, there is no default Page Zoom level setting in Firefox, as with some other browsers.
    Try the Default FullZoom Level extension: <br />
    https://addons.mozilla.org/en-US/firefox/addon/6965
    Or the NoSquint extension: <br />
    https://addons.mozilla.org/en-US/firefox/addon/2592/

  • How to hide a output field without changing its layout

    Hi
    My requirement is that i ahve a field which is just for calculation purpose and I do not want it to show as output.
    I want to know how to do that without changing layout.

    Hi,
    If your are using module pool.  Goto the field attribute, in attribute select Display-> select Invisible check box.
    Regards,
    Bhaskar

  • How to configure oracle thin drivers for SUN APPLICATION SERVER

    hi all,
    I am working with EJB with oracle as back-end. I wants to know how to configure oracle thin drivers for the SUN APPLICATION SERVER. Please explain me breifly.
    Advanced thanks to all the replies.
    with regards,
    /kumaraswamy.n

    Kumaraswamy,
    Did you try searching the Internet? Here are the results of my Internet search:
    http://tinyurl.com/zo4gk
    And one of the first hits in the list was this:
    Deploying to a Sun Java System Application Server
    Good Luck,
    Avi.

  • How do I purchase a song without putting security codes in

    How do I purchase a song without putting my security codes in because I forgot the answers to them

    The security questions should be asked the first time that you make a purchase from a new computer or device, you can't bypass them. If you've forgotten their answers and you have a rescue email address (which is not the same thing as an alternate email address) set up on your account then you can try going to https://appleid.apple.com/ and click 'Manage your Apple ID' on the right-hand side of that page and log into your account. Then click on 'Password and Security' on the left-hand side of that page and on the right-hand side you might see an option to send security question reset info to your rescue email address.
    If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then see if the instructions on this user tip helps you get them reset : https://discussions.apple.com/docs/DOC-4551

  • How can I permanently clip video without changing filmstrip order?

    I have just recently upgraded from LR1.4 to 4.2 (Windows 7 OS) and one of the features I am most excited about is being able to work with video in LR. I started clipping videos but I know LR is non-destructive. This is great for my photography but with videos I am trying to actually make the files smaller by saving only the footage that I want. So I exported to the original folder and figured I could then just delete the original unclipped file and be all set. Only problem is the exported file now appears at the end of my filmstrip since it is dated today. If I stack it it goes with the original file, but since I was planning on deleting the original file that wont help me. This is different from the way photos behave (though I'm not exporting generally there, I'm editing a copy in photoshop, and that keeps the capture time metadata and thus stays in its appropriate spot in the filmstrip). I tried copying metadata from the original file or even manually changing capture time but nothing seems to be effective. Please help!

    I use a much, much older iMovie so I don't know exactly how the new one works, but until somebody else replies...  It may be re-encoding the whole .mp4 since some formats cannot be edited without doing that, and you would need to check something like format and quality settings to prevent it from saving to a much higher quality which won't actually make the quality any better than the original anyway.

  • As DBA, how to know user's password without changing it?

    HI,
    a quick question,
    how do I know user's password?
    I mean I don't need to use 'alter user identified by new_password.'
    just want to know current user's password, is there a quick way???
    thanks a lot

    Not sure what the intention is but it is possible to change a users password and and then change it back to what it was originally, without knowing what it ever was.
    select username, password from dba_users;
    make note of the encrypted password.
    Now change the password to something else
    alter user <username> identified by <new_password>;
    Connect as that user, do whatever etc.
    Now, to change it back
    alter user <username> identified by values '<original_password>';
    Note the single quotes.

  • How to look at podcast description without changing episode to "played"?

    Hi!
    Some podcasts set their "Podcast" field to be something non-descriptive ("NPR: 03-07-2011 Fresh Air"), and in order to see the show's description I have to middle-click a bunch of times on the show's main screen. This marks the podcast as played, which is really annoying. I know I can run a script to change the "Podcast" field to be the "Description" field, but I'd rather just figure out how to do this on my iPod.
    Thanks in advance!

    Nothing "Hard" ...
    I thought it would simply suggest there would be a set up option
    available somewhere to tell the MBA to operate straight from
    the charger.
    Jean.

  • ARQ: How to configure Role Approve/Reject Email Notifications???

    Hi,
    I would like to achieve below for my business scenario with below MSMP stage configurations:
    MSMS Stages Configurations:
    MANAGER --> Can act on both request and line items level
    Role Owner--> Can ONLY act on line items
    Requirement
    In best case, a Manager approves all the line items in an Access Request. Then an email notification mail for "NEW WORK ITEM" would be sent to Role Owner(s) at next stage. This is achieved.
    Now at Role Owner Stage, below 3 cases are possible:
    1. All Role Owners can approve the line items
    2. All Role Owners can reject the line items
    3. Some of the Role Owners approve and Some of them reject line items
    In all the above cases, a Role Owner ALWAYS click on "SUBMIT" button (as he is not authorized to reject a request as a whole) and this action is considered to be as "APPROVED" and eventually, "APPROVED" event is triggered.
    This looks good in case numbers: 1 & 3. Meaning, even a single role is approved, request can be considered as approved and the request details can be sent to business user.
    However, I am facing a problem when ALL the line items are rejected by ALL the Role Owners!
    This will surely close the request. However, the email notification that will be sent to user in this case will be of "APPROVED" though the request is rejected in a sense (because all the roles are rejected)!
    Can anybody please he understand this and design proper solution?
    Regards,
    Faisal

    Hi Faisal,
    We are on GRC SP13.
    Please do below settings to make role approval/rejection comments mandatory.
    2040 - Set this parameter value as YES
    In MSMP - Role Owner - Stage settings - Please maintain these settings
    I have come across the same scenario as yours. Below is my observation.
    When all role owners rejects all roles by REJECTING roles at LINEITEM level, request instead of getting closed at ROLE OWNER stage, it is going to next stage and getting closed there. I assume this is standard behaviour
    Let's see if we can get experts advise on this.
    Regards,
    Madhu.

  • How to install the Solairs 9 without change my existing partition?

    I got 2 partitions on my hard drive: 1)Primary partition, running Win2000, occupied 40% of my hard drive.
    2)Ext partition, which divided into two drives E & F. I want to install the Solaris 9 on the E drive with out change to other drives(C,F).
    Q1: Which following selection I should choose from the Installation program: 1) Create a partition 2) Specify the active partition 3) Delete a partition 4) Exit 5)Cancel
    Q2: Is there any detailed installation info for those who just want to add Solaris to their existing parition?e.g: How to set up SWAP drive?
    Thanks,
    New to Solaris

    I cannot advocate strongly enough that you get a removable hard drive enclosure. I have these on three of my PCs and it's a god-send.
    It's a unit that sits in one of your 5-1/4" bays and attaches to your regular IDE cable. Each hard drive that you want to swap out is in its own tray. When you want to boot to a new operating system, shut down and switch trays. It adds about 10 seconds (if that) to the reboot that you would have to do anyway to get to the other operating system. With this method you have absolutely no need to mess with dual-booting since each operating system will have its own hard drive.
    They're not expensive either. The appropriate products from Lian-Li used to be about $25 for the 5-1/4" enclosure and one drive tray and about $17 for each additional drive tray. There are similar products available fromStarTech. They're of a higher quality but are more expensive.
    Trust me. Get a removable hard drive kit. You'll never want to mess with dual-booting software again. I know that I never will.

  • How do I reinstall just iCal without changing anything else?

    My iCal has become corrupted somehow. It opens blank or with features diabled. I just want to reinstall without messing up anything else. Do I just start the reinstall process using the system disks and then custom install? Will this leave everthing as it is? I don't want to open a can of worms. I tried dragging in the same program from another networked computer with no luck.

    My iCal has become corrupted somehow. It opens blank or with features diabled. I just want to reinstall without messing up anything else. Do I just start the reinstall process using the system disks and then custom install? Will this leave everthing as it is? I don't want to open a can of worms. I tried dragging in the same program from another networked computer with no luck.

  • How do I crop .mov file without changing aspect

    Hi guys,
    I'm looking to isolate a figure on blue screen into exactly 350 x 400 pixels for placement in a cd rom program. I've been able to size it down to 498 x 398 as a quicktime file, now I just need to crop a bit of the top and sides.
    Sorenson squeeze crops but I don't want any compression on it. Final cut and quicktime won't crop, but change the aspect. Anyone know a good program for a mac (free) or a way to do cropping?
    Thanks!

    maven2 wrote:
    It's actually getting distorted not in Final cut, but in Compressor when I tell it to output at 400 x 350.
    then you'll need to go the other way, apply some squash to the FCP layer so it is flattened. when compressor messes with it, it will be unsquashed.
    The distortion is probably entering your workflow in the original footage which has been captured one way (maybe as square pixels), flagged in the camera to be pulled/stretched out to 16x9 (as horizontal pixels), then you've brought it into a different aspect ratio sequence and exported it (as square or vertical pixels) but Compressor is probably seeing original PAR flag.
    bogiesan

  • How can I edit image duplicates without changing the original?

    I have an imac 2.8ghz intel core duo, running iphoto '11.
    Id like to edit a large number of images whilst keeping a seperate album of originals.
    I've tried duplicating an album of images and then editing but the program edits all copies of the image in both albums.
    Ive tried relabeling the images before editing but that doesnt work either,
    any ideas?

    1 - iPhoto NEVER modifies the original and at any time you can revert to it or see it in edit mode
    2 - albums do not duplicat photos but are simply pointers to photos so they take no space so a change to the photo from any location changes it is all
    3 - if you want two copies then duplicate the photo - generally it is uncessary
    LN

  • How to configure tns listener to access remote application?

    Hi all,
    Hope doing well,
    sir i am trying to access host database in my client system. both are connected with the same network through LAN.
    i have installed oracle client in client system. but when i running web application getting this error: ORA-12541: TNS:no listener
    i have googled for that and i got that if in tns.ora file we set the ip address of client system instead of localhost it will work.
    i changed that in my tns.ora file which is here
    # tnsnames.ora Network Configuration File: C:\app\securax\product\11.2.0\dbhome_1\network\admin\tnsnames.ora
    # Generated by Oracle configuration tools.
    GRAND1 =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.1.4)(PORT = 1521))
    (CONNECT_DATA =
    (SERVER = DEDICATED)
    (SERVICE_NAME = Grand1)
    ORACLR_CONNECTION_DATA =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
    (CONNECT_DATA =
    (SID = CLRExtProc)
    (PRESENTATION = RO)
    LISTENER_GRAND1 =
    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
    but still getting same error.
    how to come out from this error?
    thanks

    952646 wrote:
    Hi sir,
    this is my tns.ora file
    # tnsnames.ora Network Configuration File: C:\app\securax\product\11.2.0\dbhome_1\network\admin\tnsnames.ora
    # Generated by Oracle configuration tools.
    GRAND1 =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
    (CONNECT_DATA =
    (SERVICE_NAME = Grand1)
    and this is my listener.ora file
    # listener.ora Network Configuration File: C:\app\securax\product\11.2.0\dbhome_1\network\admin\listener.ora
    # Generated by Oracle configuration tools.
    SID_LIST_LISTENER =
    (SID_LIST =
    (SID_DESC =
    (GLOBAL_DBNAME = Grand1)
    (ORACLE_HOME = C:\app\securax\product\11.2.0\dbhome_1)
    (SID_NAME = Grand1)
    LISTENER =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
    ADR_BASE_LISTENER = C:\app\securax
    when i am using this command "lsnrctl start Grand1"
    it is telling the listener of the name LISTENER is already started.
    means it's telling about that listener which is in listener file not in tns.ora file.
    so this is correct or not?
    thanksits wrong you don't have listener with name called Grand1 , your listener name is LISTENER

Maybe you are looking for

  • Error Data Exporting to Excel sheet

    Hi Experts, webdynpro application , i am trying to export data to excel sheet which is coming from R3 system. it is working for 500 users but when i am trying to export more than 500 users it is showing problem. regards pavan

  • 16:9 export problem

    Hello, I shot some footage in "squeeze mode" on my Panasonic 100B. I imported the footage into FCP as anamorphic and it plays correctly on the timeline. I am having difficulty exporting the footage to QuickTime to import into DVD Studio Pro. If I exp

  • How to remake image in high quality?

    Hi guys, i really need some help, i need this extremely low quality image remade so its high quality. Doesn't have to be EXACTLY the same but pretty close a transparent background (so a PDF) would be so amazing! Any help would be greatly appreciated!

  • How to Authorize external table users in OBIEE 11g

    Hi All, I have created Session System Variables and i am Using External table Data level Authentication and successfully external table Authentication is working. My question is i want to Authorize this Extrenal table users in presentation services.e

  • [2.1.1-64] Right-clicking to "Copy" text in Script Output and other windows

    Right-clicking should bring up a menu to "Copy" text in Script Output. The short cut key for copy does work as a workaround.