How to make adf security?

Dear all
How to make adf security?
I am new adf security.
I'm facing security issue. Now i need to secure me application (User, Group, Role etc...)
Oracle recommend me use WebLogic internal LDAP or OID. How to manage User, Group, Role deploy after?
Thanks Lhagva

Hi,
once you deployed an application, users and roles are no longer in the domain of ADF Security. So the administration is
WLS console - if users and groups are in the WLS LDAP
Identity Management - if users and roles are in OID, RDBMA, Active Directory etc.
Enterprise Managers - to manage application roles and granting permissions or application roles to enterprise groups
Frank

Similar Messages

How to make ADF PanelPage as Template

Hi,
Im Harry. Im newbie to ADF and JSF
I wanna know how to make PanelPage as a template.
So when i drag PanelPage component, it already have my company logo as a header, application name as title. etc ..
How can i do that ?
FYI im using JDev 10.1.3.3

Harry - just because you are new doesn't mean that you can keep posting the same message over and over. There are 4 entries for your question already - and as Frank replies in one of them there is no templating built in in 10.1.3 - you can use copy/paste of your component.
Some people use Regions to do templating - though this is not supported and won't migrate to 11 (you can search google for template and adf region - and you'll find the solution).

How to retrieve ADF security username in PL/SQL?

I would like to create a database trigger to log the change to a table and would like to catch the username logged in through ADF security setup.
How do I retrieve this user name (not the database username) in the trigger?
Thanks,
Richard

Richard,
Welcome to OTN.
Always mention your jdev and clear usecase (recommended to read this announcement first : https://forums.oracle.com/forums/ann.jspa?annID=56).
What trigger do you mean? Logged in username for an adf app can be caught using #{securityContext.userName} groovy. You can use this to pass this wherever required. Set this to the place required accordingly, so that you can get it in the trigger.
-Arun

How to use ADF Security policies in OID Ldap

Hello
My application uses ADF security policies created by Jdeveloper ADF Security Wizard and page definition Edit Authorization menu. The application runs as expected using file based system-jazn-data.xml. I used the JAZNMigrationTool in order to migrate XML based policies to LDAP based policies. LDIF file was generated by the tool and then using the LDAPModify command the file was uploaded to the OID. No errors were generated during this process.
I used Oracle Directory Manager in order to examine the migration result, and compare the output to that described by
Introduction to ADF Security in JDeveloper 10.1.3.2
An Oracle JDeveloper Article
Written by Frank Nimphius, Oracle Corporation
February, 2007
I was expecting to find Read, Update privileges in the orcljaznpermissionaction and the attribute name in the orcljaznpermissiontarget as shown in Fig 15 ADF security entry in OID.
to narrow down the source of the issue, we examine the LDIF file, and there was no reference to these entries. Below is one example entry from the LDIF file
dn: orclguid=EF37EAA603C611DDBFAE635A1BB60EE0,cn=Permissions,cn=Policy,cn=JAZNContext,cn=Products,cn=OracleContext,dc=realsoft,dc=com
changetype: add
objectclass: orcljaznpermission
objectclass: groupofuniquenames
objectclass: top
cn: EF37EAA603C611DDBFAE635A1BB60EE0
orclGuid: EF37EAA603C611DDBFAE635A1BB60EE0
orcljaznjavaclass: java.security.UnresolvedPermission
orcljaznpermissiontarget: oracle.adf.share.security.authorization.AttributePermission
orcljaznpermissionactions:
uniquemember: orclguid=EF37EAA203C611DDBFAE635A1BB60EE0,cn=Grantees,cn=Policy,cn=JAZNContext,cn=Products,cn=OracleContext,dc=realsoft,dc=com
Note that the orcljazpermissionactions is empty and orcljaznpermissiontarget does not really specify the actual attribute name.
The system-jazn-data.xml includes all entries correctly.
rgds

Eurika
finally solved,
runing the JAZNMigrationTool requires setting the correct classpath,
Setting the classpath to the following
C:\>Set CLASSPATH=d:\jdevstudio10132\j2ee\home\jazn.jar
allows you to run the Jaznmigrationtool successfully, however you will find that the generated LDIF file does not include the premission actions (Read, Update ...)
if however, you add the adfshare.jar to the classpath
C:\>Set CLASSPATH=d:\jdevstudio10132\j2ee\home\jazn.jar;d:\jdevstudio10132\BC4J\lib\adfshare.jar
now the tool will migrate the permission policies , the following shows an extract from the LDIF file
dn: orclguid=A5E662E204D411DDBF8807BC4864C5C2,cn=Permissions,cn=Policy,cn=JAZNContext,cn=Products,cn=OracleContext,dc=realsoft,dc=com
changetype: add
objectclass: orcljaznpermission
objectclass: groupofuniquenames
objectclass: top
cn: A5E662E204D411DDBF8807BC4864C5C2
orclGuid: A5E662E204D411DDBF8807BC4864C5C2
orcljaznjavaclass: oracle.adf.share.security.authorization.AttributePermission
orcljaznpermissiontarget: AppModuleDataControl.VRoleAuthorrizationsView1.RanDateTo
orcljaznpermissionactions: read,update
uniquemember: orclguid=A5E662E104D411DDBF8807BC4864C5C2,cn=Grantees,cn=Policy,cn=JAZNContext,cn=Products,cn=OracleContext,dc=realsoft,dc=com
Ammar Sajdi
www.e-ammar.com/Oracle.html

How to make ADF application from ADF library jar ?

Hi all experts,
We used to make adf library jar from an ADF application in jdeveloper.
Is it possible to do the reverse of it.
I need to make a adf application from an ADF libraryjar file.
Regards,
Hoque

its possible to get do the application from an EAR file
New Galleary - Application - Application from EAR file.Project can be done using WAR file
New Galleray - Prjects - Project from WAR filefor SOA we can do file - import - SOA Achive into soa project

How to make a Secure User Authentication !!!!!!!!

Hello to all the experts out there,
I am making a website, in which user has to logs in by entering his userid and password. after login, he can make a transaction of money from his account. u can think of it as an online banking site. so this must be secure login i.e password should not be stolen by any third party or proxies, so it must be encrypted; same account should not be accessed by two pc's at the same time etc. i have implemented it by using sessions only.
checking userid and password from database if valid then store it to session and forward to welcome page page
<%
rs1 = stmt.executeQuery("select userid, password from users where userid = '" + vuserid + "' AND password = '" + vpassword + "'");
if(rs1.next() )
{   userExist = true;
     //user exists, now make session object
     UserInfo ui = new UserInfo();
     ui.setUserid(vuserid);
     ui.setPassword(vpassword);
     session.setMaxInactiveInterval(1800);
     session.setAttribute("UserInfo", ui);
rs1.close();
stmt.close();
con.close();
%>
<jsp:forward page="Lwelcome.jsp" />
<%
then at each page i check the attribute UserInfo
<%
UserInfo ui = (UserInfo) session.getAttribute("UserInfo");
if(ui != null && ui.getUserid().length() !=0 && ui.getPassword().length() !=0)
%>
// HTML code
<%
%>
It works fine.
plz tell me how to encript the password before sending it to server and should i also save the password in encripted form in the database?
how to achieve single login? and also as i have created an instance of UserInfo class at the time of setting attributes in session(code given above), what is the scope of this object?
Thanks in advance!!!

Use HTTPS. Start the HTTPS session when they first access the login page and continue using HTTPS until they log out. This way the password will be encoded. Check the documentation for you application server as to how to set up HTTPS for you system.

How to make Adf Table Read Only

hi.
i have a Viewobject named Employe based on an entiy object. when i insert it on a form as a table, by default the table is updatable.
how can i make it readonly (just the adf swing table) without creating an other readonly view object Employe.

I think you'll need to do this in the Jtable level -
http://java.sun.com/docs/books/tutorial/uiswing/components/table.html

How to make ADF use OC4J datasource

Hi Gurus,
I deployed an ADF application on OC4J, and I want my application to use the datasource given by the OC4J, how do I let my application know during design time.

Refer
http://www.oracle.com/technology/products/jdev/howtos/10g/usingdatasources/using_datasources.html

How to make ADF Business Component Connection which is using XATransaction?

Hi all,
I'm using ORACLE 10.1.3 ADF business component, how to set this component using XA transaction? Is that possible to use xa transaction manually from application module?
thanks

I believe you mean to ask whether ADF BC uses XA Transaction.
You can use a JDBC datasource based on XA Transaction for ADF BC. You might find this link useful for an overview: [XA Data Source Interface and Oracle Implementation|http://download-uk.oracle.com/docs/cd/B10501_01/java.920/a96654/xadistra.htm#1058741]
What do you mean by "+Is that possible to use xa transaction manually from application module?+" - Do you mean exposing the transaction of ADF BC outside its AM..? If so, I'm afraid that its not supported.
Thanks,
~Krithika

How to make a secure QT link?

I wish to post QT movies on my website but do not want them to be DLable via QT Pro or via Safari/whatever browser Activity monitor or a 3rd party DLer.
How do I achieve this?
Peter

I guess you don't want your video to be able to be downloaded. You can use html code...but that can be hatched or bypassed in a few seconds.
The only way to try to safeguard your on the internet is to put your videos on a streaming server. ( http://www.apple.com/quicktime/player/tutorials.html ) Even on a streaming server one can use a screen capture (video) program like Snapz PRO X to capture your video.
There really isn't a sure fire way for safeguarding your videos on the internet. You can only make it harder to download your video.

How to make ADF page center align when open in mac 1920×1080

Hi all,
we have created an ADF application using 1024*786 and display is working fine. But when I open the application in safari browser in mac pc having 1920×1080 screen size the display start from extreme left top which takes 1024*786 screen and leave the left area blank. I wanted my fixed screen to come in the middle of the browser 1920×1080 .
I have tried the following option by setting inline style
style="margin-left: auto;
margin-right: auto;
width: 1024;
in <af:document tag but it doesn't work.
How can i move my page to center of the screen for higher resolution browser?
Thanks in advance

Thanks Vince but it stretch whole screen that is not require. As my screen size is fixed 1024 *748 I want my screen should come in the center . I need same behavior when I open yahoo.com in mac browser.

How to make NTLM-secured websites accessible?

Hello,
I know that the Portal Server Gateway doesn't support NTLM
authentication.
We have some intranet-sites which we try to access via SRA.
So we enabled both "Basic Authentication" and "NTLM", but the
gateway gets a "HTTP 401.2" - "not authorized".
Instead, it should use the "Basic Authentication" method (like browsers does).
It is not possible to disable the "NTLM"-method on the webserver,
because it is already used for intranet access.
Any ideas?
(I cross-post this in Portal Server 3 and Portal Server 6, because the
question applies to both versions).
Thanks,
Juergen Maihoefner

Hi,
Here are the options we tried and succeeded using NTLM protected sites:
1 - Use Netlet.
2 - If you want to user the rewriter, then try the follwing:
Basically, we set up a mirrored web site using the same home directory, and therefore all the same permissions etc. The server was configured identically, with a few exceptions.
- We added a second IP address to the Intranet Web Server for use by the new Web Site.
- The host header for the new web site should include the new IP address and the host name that was used to access the server.
- The new virtual web site was set up to use Basic Authentication rather than Integrated Windows Authentication.
- We added hosts entries to the Portal/Gateway/Proxy servers association the hostname <web site host> to the new IP address.
In this configuration, when a request comes through the Portal, it will be the new web site. This site will authenticate properly as it is using Basic Authentication. Any requests origination from the Internal network (not through the Protal) will be handled by the existing server, and authentication will be handled automatically. Please note that any updates to the website will be automatically published to both virtual web servers as they both point to the same physical location.
Steve

How to Make Wirless Network SECURE

I am running my desktop hard line to a comcast modem which runs XP Pro. My Laptop which is running Vista is set up wireless via the WRT54GS Linksys Router.
The wireless network is running great but it is identified as UNSECURED!
After three 30 minute waits last night, 2 disconnects when I was not understanding them ( not a computer whiz but I do ok) and 1 live chat tech that copy and pasted the directions on how to set it up but not how to make it secure and then a quick disconnect .
Can anyone tell me exactly HOW TO MAKE THIS NETWORK SECURED and WHAT computer shall I use to perform this?
Thank you for any help you can give me,
SWAT
JohnDoe sorry for violating any rules.
(Edited post for guideline compliance. Thanks!)
Message Edited by JOHNDOE_06 on 08-27-2007 11:04 AM
Message Edited by SWAT on 08-27-2007 11:13 AM

SWAT wrote:
Sbatch...you click on the pull down window to the settings.....I click on WPA then I input the code I wanted (only room for 1 code) then scroll all the way down to click on save settings.
That method does not secure my laptop wireless settings?
**No, that secures your router's wireless settings.
or
Is this the only method to secure the network?
With some investigation I can find have found the following:
If I right click on my Network Icon in my tool bar and then click Connect to Network and then right click on the Network and right click Properties I get a box with the following:
Tab for connection and a tab for security with pull down bars which can be changed...
1) Security Types -No Authentication (open), shared, wpa2 personal, wpa personal, wpa2 enterprise, wpa enterprise and 802.1x
2) Encryption Types -WEP
Current settings on my laptop Linksys wireless network security is
Security Type- OPEN
Encryption- NONE
sBatch when I perform the WPA on my desktop my laptop must be off or not on the network correct?
Doesn't matter, once you change the security settings onthe router, you will be prompted for the settings to reconnect to it.
Has anyone found the LinkSys hyperlink for setting the WRT54GS router as SECURED?
Define "secured". Wired, only physical connection have access.
Wireless, once you add WPA or WEP (WPA is better) it's secured.
Sincerely,
SWAT
Does that help?

ADF Security Design Question

Hi All,
I am developing an ADF web application. The security design is such that user authentication is mapped to database users. The design I see several pros and cons
1) Different database users means I cannot take advantage of connection pooling.
2) The architect argues SQL querying can be controlled at database level for each user.
I have never been involved in such a web application. Can anybody please guide me if this is the way to go for ADF web application, any other pros and cons. The database is Oracle 11g. I still believe that application security should not be tied to the database security.
Worst case if I have to go with this design, How to implement ADF security using database users.
Thanks

I blogged a use case for using Proxy Authentication with JPA here http://blogs.oracle.com/olaf/2010/04/using_oracle_proxy_authenticat.html. (Being a sample it includes a setter for user name, but a case with a JAAS Subject and Principal is easily adaptable).
I'll dig out an ADF BC example and blog about it, too.
--olaf

How to make form based authenticaiton in adf security?

Hi all
How to make form based authenticaiton in adf security?
help give example video or project.
Thanks lhagva

Have you read the docs (http://download.oracle.com/docs/cd/E17904_01/web.1111/b31974/adding_security.htm)?
Timo

How to make adf security?

Similar Messages

Maybe you are looking for