How to implement a tree like security realm?

hi all:
i am working on a project . it's a very complex one and most importantly there's
so many
functions( 1000 or more) and every fuction should be protected resources. so i have
to define many roles and map the roles to the many functions. it's a very tiring
job and
i am not sure the role to function mapping is stable one. because the mapping is
saved in
a xml file and this file is depolyed with the application, so if there s any changes
we have to redeploy all the application and restart the server.
there s still another problem. we want security realm to be a tree instead of
a flat one( weblogic's group is a flat one ) . if we assign a node to a role all
its children
belong to the same role.
so is there way to do this. any solution?
regards
daniel wang

maybe you could exploit the way ACLs have dotted names to reflect your tree
structure, so the acl root applies to all functions, root.branch1 only
applies to functions on branch branch1, and root.branch1.branch2 applies to
functions on branch2 of branch1. there´s an api that gets the most specific
acl given a path to a node.
i'm not it´s acls that you want to correspond to nodes, but maybe you can
work out some kind of scheme that gives you what you want.
andrew
"daniel" <[email protected]> escribió en el mensaje
news:3d16efc7$[email protected]..
>
hi all:
i am working on a project . it's a very complex one and mostimportantly there's
so many
functions( 1000 or more) and every fuction should be protected resources.so i have
to define many roles and map the roles to the many functions. it's a verytiring
job and
i am not sure the role to function mapping is stable one. because themapping is
saved in
a xml file and this file is depolyed with the application, so if there sany changes
we have to redeploy all the application and restart the server.
there s still another problem. we want security realm to be a treeinstead of
a flat one( weblogic's group is a flat one ) . if we assign a node to arole all
its children
belong to the same role.
so is there way to do this. any solution?
regards
daniel wang

Similar Messages

Anyone knows how to implement Decomposition Tree in Oracle BI products? to

Hello Everybody
Recently I'm trying to use Oracle BIEE plus to upgrade our old report service in our product. I'm a newbee to OracleBI products but I have a question that oracle support guys in our region also could figure out a clear answer. If anybody here can give me some clues it would be appreciated.
I once used ProClarity BI product before, and ProClarity report service can provide a very powerful visualization tool like Decomposition Tree. I'm quite interested this function. But I searched many Oracle BIEE plus and ESSBASE documents, it seems Oracle BI can' implements the functional for which Proclrity Decomposition Tree can provided?
Is there any body knows any other solution to implement Decomposition Tree in Oracle BI product?
Thanks

Appreciated the quick response:)
Yes. I don't find the directory object .. I'm not very familiar with biee so far so might be me slight this object in my investigation.
I need to check this object and see how it works.
And thanks for your advise.

How can one use one specific security realm per application ? The realm-name attribute of the login-config tag of web.xml does not make any difference

Hi,
I have different sets of users coming from different databases and using different
roles mapping for each of my web applications. I would like to configure a specific
security realm per application in my weblogic server 7.0 . Is it possible ?
I try to specify the realm-name of the login-config tag from the web-xml deployement
descriptor but it doesn't make any difference. The default realm is always used.
I also would like to tell the Weblogic server to use the default realm in case
the realm isn't specified or isn't found. For example, the default would contains
my admin users.
Thanks a lot for your answer.
Iz

I thik this is a common mistake the ralm-name tag in the deployment descriptor is used
just by the browser for display purposes (when it opens the basic auth dialog box) so as
of now there is only 1 active realm which can have multiple providers as Kevin pointed
out
Kevin Lewis wrote:
WebLogic 7 now ignores the realm-name tag (I found that out yesterday).
My understanding is that there is only one realm active at a time for a domain
(I would be interested in being contradicted in this).
However, you can have multiple providers in each category of a realm: authentication,
authorization, etc. Therefore, what you can do is key authentication, et al,
off of some other information. We have our users enter their company, for example,
and use the TextInputCallback to get it. You could also encode something in the
initial page, based on the URL they hit, or whatever, and get that back in your
callback.
You can store that information in your own Principal implementation, and key off
of that in your authorization provider, going to a different database as appropriate,
or abstaining when a specific provider doesn’t have anything to say about a subject.
Anyway, there should be a way to do it, even if it's more complex than you would
have hoped.
--Kevin

How to implement Oracle user/role security with Access front end?

Hi,
We have successfully migrated our Access database tables to Oracle 10g using SQL developer. We've recreated all the users and roles(i.e., access groups) in Oracle and granted rights to tables.
In the Access front end database, in the Database window we have saved linked Oracle tables which replaced the Access tables. The forms, reports, queries run fine with the linked Oracle tables. All the linked table use one ODBC DSN to the Oracle database with the same Oracle user id.
We need to be able to authenticate users into the Oracle database and RE-link the tables based on their own unique user id. By during so we can allow users to use the Oracle standard user id/role and system privileges to control select, update, ect. rights to the database.
I've been able to use the VB code within Access to logon into the database with a unique id, but I have not been able to find out how to RE-link the tables to the unique user id using VB. There should be some way to relink tables dynamically, based on users login into the Access front end.
I don't know a great deal about Access projects, but I do know with SQL server allows login into your Access project and link tables dynamically.
Can someone give me some assistance or point me in the right direction?
Thanks in advance,
Larry

We had one of our programmers here come up with a VB code solution for re-linking table within Access. However the relinking takes 3-4 minutes for 100+ tables.
In an effort to help you understand the situation better, I will attempt to elaborate on the problem:
We have an Access 2003 application which currently has a front end using Access(forms, reports, queries, & VB code) and a MS Access 2003 backend.
We have migrated the backend tables to Oracle. However, we still have a need to maintain the front end in Access, since we have over 60 forms, 40 reports, 200+ queries in Access. Its easy to understand, we have a significant investment in the front end(Obviously, the plan is to migrate the front end also at some future date).
In order to utilized the existing front end, we have to validate and modify the current front end connections to the new Oracle backend. One of the features of Access is that you can "link" tables and save the link for runtime. Each Access table can have its own link which is a separate ODBC/JET connection. As such, each separate link has its own userid/database information.
The other issue with using the Access front-end is that Access utilizes a workgroup file to implement user and group security. The workgroup file contains all the users and which groups the users belong to in Access. Then within Access, you allow users access to object(tables, queries, ect) by their userid and or group. When users open an Access database with Access security enabled, they are required to log into Access. The login is authenticated by the workgroup file. Once, logged into Access, users have rights to Access objects based on their rights granted to their userid and groups they belong. The problem here is that when you remove the linked Access tables and replace them with linked Oracle tables, Access has knowledge about Oracle table rights granted to users; nor would you expect it to.
The dilema is the disconnect between Access and the fact Oracle utilizes a similar but much more sophisticated security model. It creates users and roles(which are similar to Access groups), and again this is independent of Access security.
Our solution was to still use the Access workgroup file security along with the Oracle security model. By using the Access userid and then creating a similar Oracle userid with similar table rights granted in Access, you could apply security within Access and also with the Oracle database.
For example, a user BOB logs into Access via the workgroup file, using VB code, Access then establishes a Oracle connection logining into Oracle using the same unique userid BOB into Oracle.
After connecting and validating user BOB into Oracle, then the Access tables are relinked to Oracle using the user BOB userid and table rights.
This Oracle userid has been granted table rights specific for this userid.This allows the user BOB to use the Access application and still be authenticated into the Oracle database.
The problem with this solution is that the relinking of the saved Access tables takes 3-7 minutes for about 100+ tables. This is not acceptable for users each time they log into the application.
Our current alternative is to use one Oracle userid to login each user, and use Access form restrictions/security to allow/prevent users from updating/viewing data. Obviously, this is not the optimal solution in respect to security, but it at least allows us to control access to the data(via the forms) by using one logon required for each user, and quick startup time for the application.
I understand SQL server does a better job in integration, but we use Oracle which is what I am trying to work with.
Larry

How to implement Bursting(Row level security) in Xcelsius

Hi,
We are using Xcelsius 2008. We have created xcelsius dashboard using Qaaws but for authentication in qaaws we are suing enterprise authentication and default user.
Now in my dashboard i have one combo box wich gives data fro diffrent states, now i need to restrict the user to see the state values. I implement the row level security in universe, when i create webi report and view that reprot in infoview, the row level security works. But when i publish the dashboard to infoview the row level security doesn't work.
We are uisng XO 3.1 with SSO on IIS. So how and what are the diffrent option available to implement the row level security in Xcelsius Dashboard.
Thanks for the help in advance.
Thanks,
Nimesh.

Nimesh,
Were you able to implement ? I have a requirement to use the same dashboard for 5 regional users.
Row level security works.
combo box intial value is Global , when I login as North America user, combo still shows Global but it will have the value of North America.
i am curious to know how you implemeted this?
Thanks
Pushpa

How to represent a tree (like file system dirs) in object?

I am parsing a dynamic set of nodes at runtime. The nodes below a "known" node are all dynamic, in that they can be any number of nodes at any number of depth. I am basically doing what DOM does, in that I want to take these nodes below the "known" node, and create a simple object in memory. I am using xml pull parser though, so I am not using any sort of DOM/SAX/SAX2 parsing and do not want to use anything outside of my own object or one that is in the JDK 1.3 or later API. I see TreeSet and TreeMap, but I don't see much in the way of parent/child(ren) methods. I would think that each node can have a parent node, as well as any number of children.
Is there an object like this (simple, small bit of code preferrably) that I can download/use, or does someone have a snippet in mind they can post that would be a valid object to represent an xml/dir tree the way I need?
Thanks.

I've seen this kind of think implemented very easily. You basically need a TreeNode object, which has a collection of children (which are also TreeNodes).
You can use a Vector or Hashtable or some such for the children. I would also suggest maintaining a "parent" reference in each child.
At that point, you simply implement the getters and setters that you want.
Chances are you will also want to maintain some info about each node. You can be very specific (say providing a name and one or two other attributes), or you could introduce another collection: properties.
I suggest you implement some kind of toString(), which lets you print out your tree.
Finally, you may decide that you want to support access by path or relative path. It's useful, but paths are a pain in the butt - trickier code to get right.
My estimate: A few hours for the basics, and then tweak it as you go.

How to derive a tree like output in Report?

Hi,
I have a report which should produce output like a tree which takes the data from a single table?
If anybody having idea in this regard please post me.
Thanks,
henschel

I've seen this kind of think implemented very easily. You basically need a TreeNode object, which has a collection of children (which are also TreeNodes).
You can use a Vector or Hashtable or some such for the children. I would also suggest maintaining a "parent" reference in each child.
At that point, you simply implement the getters and setters that you want.
Chances are you will also want to maintain some info about each node. You can be very specific (say providing a name and one or two other attributes), or you could introduce another collection: properties.
I suggest you implement some kind of toString(), which lets you print out your tree.
Finally, you may decide that you want to support access by path or relative path. It's useful, but paths are a pain in the butt - trickier code to get right.
My estimate: A few hours for the basics, and then tweak it as you go.

How to implement the grid like this?

Dear All:
I have this grid view as following the sketch :
|DS1|DS2|DS3|DS4|
|------|------|------|------|
|sss |sss |sss |sss |
|sss |sss | sss |sss|
| -----|------|------|------|
|DS5|DS6|DS7|DS8|
|------|------|------|------|
|sss |sss |sss |sss |
|sss | sss|sss| sss |
Note:
1. the border is solid line and "sss" represents white space.
2. might have multiple rows or columns like this pattern.
3. smaller cells are labels and bigger cells are filled with a few different colors
4. when hovering mouse on each bigger cell, the tool tip text will be shown.
5. sizes of the cells are fixed and not changed when the container is resized.
Any clue for implementation? I appreciate all for reply.
Johnosn

Use a JTable. If your data is algorithmically derived, consider implementing your own TableModel. You may need to implement your own TableCellRenderer.

How to Implement Dynamic Tree structure in jsp

Hi,
Does any body help me to solve out my requirement??
I want to display all my folder contents (parent & childs) in windows explorer format, the root folder path will come from database.
Thanks in advance

There are many ways to achieve this. The simplest would be to use some existing tag library that renders a tree structure and feed it with the required data.

How to implement the function like this?

I'm sorry, don't know why the previous post was approved then deleted.
User visit http://aa.com/show?id=1 then the player plays 1.swf
User visit http://aa.com/show?id=2 then the player plays 2.swf
User can only see the url id, but can't see which swf is played.
Should I build a FMS server and a player embed in the browser? Thanks,

it disappeared because both links are for the same american arilines page which makes it appear as if you're posting spam on behalf on aa and your question is only superficially related to flash.
anyway, to use query strings to determine what to show on a web page (or which web page to show), the window.location string contains the full url. among the ways you can use that to retrieve the query string is:
<script>
var qs=window.location.substring(window.location.indexOf("?")+1);
if(qs=='id=1'){
//window.location=embedding html for 1.swf
} else if(qs=='id=2'){
//window.location=embeddign html for 2.swf
</script>

How to implement secure help in SharePoint 2010?

Hi,
We are having a sharepoint site running over HTTPS. When I click on help link given on top right side, I get a security warning saying that only secure content content can be displayed. This is probably due to the non secure content(http) used by microsoft
help.
Can anyone please suggest how to implement microsoft help having secure content?
Please see screenshot below:

Yes office.microsoft.com URL works when I use https:// instead of http:// .
Can you please let me know in which file this help function is used?
Please provide me with an example if possible.

Tree Like that of windows (Desktop-- explorer)

Hi,
I have to implement a tree like that of windows in(Desktop-->explorer)
do I proceed programmaticly.
Please telle me how.
Thanks

What about maximizing your frame programatically and getting its size? I think it will return what you want.

Using LDAP as security realm

Hi,
Our goal is to use LDAP(Iplanet Directory Server 5.0) as a security Realm
for Weblogic Personalization and Commerce 3.5.
Using the WLCS console, I've modified the config.xml file and following
elements are added:
<LDAPRealm AuthProtocol='simple' Credential='admin'
GroupDN='ou=groups,dc=netnumina,dc=com' GroupIsContext='false'
GroupUsernameAttribute='uniquemember'
LDAPURL='ldap://sanand.netnumina.com:389' Name='wlcsLDAPRealm'
Principal='uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot'
UserAuthentication='local' UserDN='ou=people,dc=netnumina,dc=com'
UserNameAttribute='uid'/>
<CachingRealm BasicRealm='wlcsLDAPRealm' CacheCaseSensitive='true'
Name='wlcsCachingRealm'/>
But when we try to restart the WLCS, it throws java exceptions that context
is not initialized and I get the following error
<Jun 15, 2001 3:41:28 PM EDT> <Emergency> <Server> <Unable to initialize the
ser
ver: 'Fatal initialization exception
Throwable: weblogic.security.ldaprealm.LDAPException: could not get
context - wi
th nested exception:
[java.lang.reflect.InvocationTargetException - with target exception:
[javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid
Credential
s]]]
weblogic.security.ldaprealm.LDAPException: could not get context - with
nested e
xception:
I tried using Windows NT as a security realm but that gave me errors too.
Does anyone has any experience using anything other than the default Realm?
Any help would be appreciated. Thanks!
Asim Raja
[email protected]

I'm not sure, but I suspect you can't
since this would create a circular dependency -
your realm would rely on the upper level security
checking calls but those calls would rely on your
realm.
My suggestion is to give it a try and see what
happens.
-Tom
Ozcan ADIYAMAN <[email protected]> wrote:
Hi ,
I am implementing a simple custom security realm using LDAP as the
security store and I can see the users, groups and acls from the admin
console.
My question is (a custom realm newbie question) ;
Is it possible to use weblogic.security.acl.Security with my custom
realm to check permissions, get the current user,etc.,
OR
is this class ONLY used with default realms (when ACL is stored in a
file) ?
Thanks
Ozcan

How to implement a filter

Can anyone tell me how to implement a filter (like working sets filter in the project toolbar in Jdeveloper).

I am developing an extension and want to implement a "Filter"(funnel shaped) with similar features which is present in the jdeveloper(project toolbar->working sets)

Uup and security realm

Does UUP require a Security Realm? Can we implement UUP without a security
realm?
Much appreciated for any help

Does UUP require a Security Realm? Can we implement UUP without a security
realm?
Much appreciated for any help

How to implement a tree like security realm?

Similar Messages

Maybe you are looking for