How to obtain a user's roles

Question

We are migrating a OC4J app to weblogic 10.3. I won't go into all the gory details, but there was a security component that would read the jazn-data.xml file and return a list of all the roles a username was mapped to. Once I define the users and roles in the WL realm, is there any programmatic API that given a principal, can return all the roles that the principal is assigned to?
Thanks,
Leor

Answer 1

Hi Leor,
You can use a WLST script. I don't have a finished script for what you want, but here is an interactive example which should show how you navigate the WLST structure, down to the security information:
[bea@myserver esbDomain]$ . bin/setDomainEnv.sh
[bea@myserver esbDomain]$ java weblogic.WLST
Initializing WebLogic Scripting Tool (WLST) ...
Welcome to WebLogic Server Administration Scripting Shell
Type help() for help on available commands
wls:/offline>
wls:/offline> connect('weblogic','weblogic','t3://myserver:7011')
Connecting to t3://myserver:7011 with userid adadm ...
Successfully connected to Admin Server 'esbAdminServer' that belongs to domain 'esbDomain'.
Warning: An insecure protocol was used to connect to the
server. To ensure on-the-wire security, the SSL port or
Admin port should be used instead.
wls:/esbDomain/serverConfig> cd ('SecurityConfiguration')
wls:/esbDomain/serverConfig/SecurityConfiguration> ls()
dr--   esbDomain
wls:/esbDomain/serverConfig/SecurityConfiguration> cd ('esbDomain')
wls:/esbDomain/serverConfig/SecurityConfiguration/esbDomain> ls()
dr--   DefaultRealm
dr--   Realms
-r--   AnonymousAdminLookupEnabled                  false
-r--   CompatibilityConnectionFiltersEnabled        false
-r--   ConnectionFilter                             null
-r--   ConnectionFilterRules                        null
-r--   ConnectionLoggerEnabled                      false
-r--   ConsoleFullDelegationEnabled                 false
-r--   Credential                                   ******
-r--   CredentialEncrypted                          ******
-r--   DowngradeUntrustedPrincipals                 false
-r--   EnforceStrictURLPattern                      true
-r--   EnforceValidBasicAuthCredentials             true
-r--   Name                                         esbDomain
-r--   NodeManagerPassword                          ******
-r--   NodeManagerPasswordEncrypted                 ******
-r--   NodeManagerUsername                          nodemgr
-r--   Notes                                        null
-r--   Type                                         SecurityConfiguration
-r--   WebAppFilesCaseInsensitive                   false
-r-x   findDefaultRealm                             WebLogicMBean :
-r-x   findRealm                                    WebLogicMBean : String(realmDisplayName)
-r-x   findRealms                                   WebLogicMBean[] :
-r-x   freezeCurrentValue                           Void : String(attributeName)
-r-x   generateCredential                           [B :
-r-x   isSet                                        Boolean : String(propertyName)
-r-x   unSet                                        Void : String(propertyName)Regards Peter