Oracle Poratal Security Or Portal Security Infrastructure

We need to implement the Oracle Portal Application user for Authentication and Authorization. We have different pages for different user roles, so please help me how can I use "Oracle Poratal Security Or Portal Security Infrastructure" for securing porlets or pages from unauthorized accesss.

I suggest taking a look at chapter 6 - "Securing your Portal" of the OracleAS Portal Configuration Guide to get an idea of the security architecture and at the security-related information in the Portal User's Guide.
You can find these guides in the Application Server documentation library on OTN at http://www.oracle.com/technology/documentation/appserver101202.html

Similar Messages

Oracle Forms and Portal. & Portal Security

I need the following questions answered for a client who is
trying to move from IIS to Oracle Portal. any pointers would be
extremely helpful
1. How to configure Oracle Forms to run with Portal.
2. Is it possible to display forms inside a Portlet. If so, will
the forms hold the same state when the page is refresed.
3. Is it possible to display WORD/PDF/EXECL documents in their
native format inside a Portlet.
4. Any information on how IIS security integration is possible
with POrtal. i.e ( if there are ASP pages running on IIS
security, how to integrate it with Portal Security mechanism
-Thanks
ganesh

You can create roles in Oracle with the appropriate privileges to access the application. For example,
you could create a role that has only read access to all the tables in the database. You could assign this role to the menu. Also, you may want a role for a manager that whould enable him to insert data or to see a few special forms. You could assign this role to the menu associated with the form.
Using Form Builder, you can manage menu security with Oracle server roles. After defining the roles to use for a menu module, you could then specify the roles that have access to each menu item. When you set the 'Use Security' property of a menu module to 'Yes', the form enforces security. After setting the 'Use Security' property to 'Yes', you can use 'Module Roles' property to construct the entire list of roles with access to that menu module.
I hope it helps.

How to set portal security context for a procedure

Hi, I have procedure that needs to call some of the PDK APIs (WWSBR_API), but outside the scope of the web browser, i.e, automatically via a DBMS_JOB or queue. There is no HTML outputted, but rather a log entry made to a custom table.
The schema that this custom pkg belongs has all the necessary grants made to it from provsyns so that it should run.
How do I programatically set the context of the portal security so as to make the PDK APIs think it has been invoked by a Portal Adminstrator or a user with sufficient privs to perform the actions against the PDK and therefore not bomb out with security exceptions? I have seen this documented quite some time ago, but cannot find the details.
Regards
John

You need to use the wwctx_api.set_context procedure.
http://portalstudio.oracle.com/pls/ops/docs/FOLDER/COMMUNITY/PDK/plsql/doc/sdk11scp.htm

Secured supplier portal with E-Sourcing

Hi,
We need to implement secured supplier portal connection to E-sourcing system(https:// www.-----).We set up the apache reverese proxy sytem for supplier portal.
When the supplier attempts to connect ,the URL is not getting connected and is giving error.
We are using system default cluster for both buyer and supplier portal.
Please let us know what settings to be done in E-sourcing system in order the supplier portal working.
Thanks in advance,
sai.

Hi,
for seecure link you need to check SSL in Directory configuration for supplier
~Ankush

How to get current IUser (com.sapportals.portal.security.usermanagement)

Hi,
does anybody know how to get IUser for the current user?
I know how to get current IUser from com.sap.security.api package:
IWDClientUser wdcu = WDClientUser.getCurrentUser();
IUser sapUser = wdcu.getSAPUser();
but I need to have IUser from com.sapportals.portal.security.usermanagement package.
Regards,
Ladislav

Ladislav,
Try this:
Get the IUser uisng the API com.sap.security.api.IUser and store it in a variable, say <i>sapUser</i>.
Then,
// Convert the logged in user to old EP5 usermanagement API
com.sapportals.portal.security.usermanagement.IUser user = null;
try
com.sapportals.portal.security.usermanagement.IUser user = WPUMFactory.getUserFactory().getEP5User(sapUser);
catch (UserManagementException e)
e.printStackTrace();
Bala

Doument Access - using Portal security or Document Database security

I originally posted this on the Security Form, but realized that it might be solved using the PDK.
I have a table in my database that contains information about a document (Name, Rev, Author, groups that have access). I want users to login to my portal and in a portlet, I want them to be able to click which docs they have access to see; based on who they are logged on as.
Would I use the PDK for this? If I use portal security, I think I will be maintaining the security twice (database and portal).

          Hi Wendell,
          There is a patch available for this known problem. Please contact BEA support and
          ask for patch CR075892_70.jar for WLS 7.0.
          Thanks!
          Deb
          Wendell Nichols <[email protected]> wrote:
          >I have the opposite problem. My ejb always is denied access to the adapter
          >resource. I'm a Weblogic novice, (but the adapter works on other servers,
          >I'm testing on WL to ensure it works there).
          >How do I get the minimum security in place to test my adapter?

Import com.sapportals.portal.security.usermanagement.IUser; is deprecated

import com.sapportals.portal.security.usermanagement.IUser; is deprecated
Is there any alternative???

Hi,
could please tell me, what kind of jar-file I have to add to the project to use
com.sapportals.portal.security.usermanagement.IUser ?
Thank you in advance.
Kind regards, Patrick.

IUser problem with com.sapportals.portal.security.usermanagement

I am trying to get the current user so I have written
IUser user = request.getUser();
I have imported com.sap.security.api.*;
The compiler insists I need com.sapportals.portal.security.usermanagement.IUser
I thought that version was deprecated or at least not the preferred method?
It keeps saying my classpath is incomplete. Why can't it use the IUser from the com.sap.security.api?
Any help would be greatly appreciated.
Thanks
Paul

Update
The offending line appears to be IResourceContext myContext = new ResourceContext(user);
when this line is added it causes the above error which I can only assume is because ResourceContext(user) accepts a different kind of user object. does anyone know if there is another way to do this? Here is the rest of the code to see where i am headed:
IUser user = req.getUser();
RID rid = RID.getRID("/temp");
IResourceFactory factory = ResourceFactory.getInstance();
IUserFactory uf = UMFactory.getUserFactory();
IResourceContext myContext = new ResourceContext(user); //this is the line causing the problems.
IResource resource = factory.getResource(rid, myContext);
if(resource.isCollection())
ICollection collection = (ICollection)resource;
IResourceList children = collection.getChildren();
Iterator i = children.listIterator();
the point is i am trying to get the ACL permissions on the children of the rid

Package com.sapportals.portal.security.usermanagement : No javadoc ?

Dear all,
I tried to find the javadoc concernig this package "com.sapportals.portal.security.usermanagement" but I did not find it.
Does anyone have any clue where to find it please ?
Thank you advance.
Best Regards.
Greg.

Hi Greg,
I think the reason you're not able to find is because com.sapportals.portal.security.usermanagement is now deprecated. For EP 6.0, the old classes have been re-written to map to the new UME 4.0 classes and methods contained in com.sap.security.api.
please see the document below for details...
USING THE NEW USER MANAGEMENT API IN EP 6.0
https://www.sdn.sap.com/irj/sevlet/prt/portal/prtroot/docs/library/uuid/91f0cd90-0201-0010-a190-c4d7cbd5b463
hope this helps,
harman

DC for com.sapportals.portal.security.usermanagement .IUser

Hello all,
When developing a local application I can reference class com . sapportals . portal . security . usermanagement . IUser via NWDS local libraries using ECLIPSE_HOME variable and referencing jar file com.sap.security.api.ep5.jar.
There is a standard DC that has this class or jar file?
Or should I add this JAR to an external library.
Regards,
Mauricio

Hi,
You will have to add this jar as an enternal library.
Ashu

Portal Security with existing JSP Applications

Hello,
we have some existing JSP Applications an want to include them into out portal. They are currently running on iAS as standalone applications. But we also want to protect them using portal security.
How is it possible to use Portal Security for those JSP Applications.
Regards,
Frank

Hello,
currently I don't need to include them as portlets.
I included the first Page as jsp Report... because of that, this jsp is secured. But my application has more jsps.
Probably I could set an sessionvariable in the first protected jsp and check it in all other jsps. If this sessionvar is not existing, the user is not allowed to see this application.
Currently I have no other idea.
Regards,
Frank

Portal Security 7.x documents

Hi
Can anyone please point me the link about Enterprise Portal Security document based on EP 7.x.
Thanks again

Hi Suresh,
Please refer the below link for Security, SSO, and Authentication. It would be of great help.
Award good points for useful answers.
http://help.sap.com/saphelp_erp2005/helpdata/en/42/ea2fcfb2201bdae10000000a11466f/frameset.htm
Regards,
Ramesh
Message was edited by: RAMESH PARAMESWARAN

File Security on Portal - Help Please urgent

Hello all,
I need an urgent help on File Security on Portal.
suppose we have 5 .PDF files in a perticular directory on the portal server. I want to have J2EE engine check if the user is already logged into portal or not. If the user is not logged in I want to throw logon screen asking them to Login. If the user is logged in I want to show the document directly.
How to configure these things. Please help me.
Thanks and regards,
Vasu Pabbaraju.

Hi,
instead of storing Your files into the portal server's filesystem You could store them into KM.
If the file "dummy.pdf" is stored into the KM folder "/documents/test", You could call it via
http(s)://<potal server>:<port>/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/documents/test/dummy.pdf
The portal will ask for a login before displaying the document.
Best Regards
Frank

IFrames not supported for my secure work portal. Nb this also happens with IE9

I have a secure internet portal to log into for my work email. We use iNotes.
I login using a user name, a password, a four digut code in conjunction with an RAS token. I can get into the website ie authenticated, but when trying to get to the home page or iNotes home page I get an 'iFrames not supported' message. Note I also get this for ie 9 (x32 and x64). Having said this iNotes does not 'play' at all well in IE8 and higher...it has always worked well in Firefox until v4.0. Also not much help from the IBM web support page for iNotes.

- See:
iPod touch: Hardware troubleshooting
- Try another cable. Some 5G iPods were shipped with Lightning cable that were either initially defective or failed after short use.
- Try another charging source
- Inspect the dock connector on the iPod for bent or missing contacts, foreign material, corroded contacts, broken, missing or cracked plastic.
- Make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar

Oracle Project Analytics - Project Manager Security Implementation

Has anyone implemented a security scenario for Project Managers, such that they can only see the information associated to their projects when using EBS as the source? If so,
- How did you identify the relationship between project managers and their projects? Did you use an initialization block and pull this information in from EBS?
- Where did you define the security/filtering configuration so that they were limited on what they could see?
- Did you create a custom responsibility for 'Project Managers' and have them access a set of Project Manager dashboard/reports that followed the Project Manager security model?
Thanks in advance.
k
Please note that I have posted this same question/thread in the BI Apps forum. I didn't want to duplicate effort, but I know different users may only come to this forum. The link to the original thread is below:
BI Apps Forum Thread
Oracle Project Analytics - Project Manager Security Implementation

Coolmesh84,
Thanks for the great info and reply. This makes complete sense to me, but I just want to make sure I am clear on a couple points:
+1. Use an initialization box to filter the user's emp id+
You mean use an init block to pull the users employee id and store it in a session variable correct? The session variable will then be used later as part of the filter criteria.
*2. and add a filter to the required dimension table in business layer to filter based on the project_manager_id column for the project manager group.+*
To implement the step above, would you follow theses steps:
1. Go to Manage->Security
2. Under Groups, select the group planned to be utilized for this filter (in this case I double clicked the Project Manager group).
3. I then Click permissions button for this group
4. Go to the Filters tab of the window that pops up
5. Add a filter, go to BMM tab and select the Project dimension and then define a filter for Proj Mgr Id = nqsession.employeeid
+3. Ideally you should be able to use the OOTB project manager group for this security.+
This is a good point, but a few more questions here - There are a number of Project related groups (see below) in the out of box Oracle BI Apps RPD and all of them essentially roll up to the super group 'Operating Unit Org-based Security'. Is there a best practice or preferred approach for utilizing these groups as they related to Oracle EBS v12? Is there any good documentation out there to see what the intended use and setup is for these groups? Do all of these groups relate back to an EBS Responsibility? I have read through the OBIA Security Configuration document and basically all it says is to enable the operating unit org initilization block and thats all .. not really all that helpful.
Thanks again - k
Project Executives
- Project Billing Super User
- Project Costing Super User
- Project Super User
- Projects Implementation Super User
Project Managers
- Projects Implementation Super User
- Project Administrator
- Project Manager
- Staffing Manager
- Operations Manager
- Project Super User
- Resource Manager
Project Team Member
Edited by: user_K on Nov 22, 2010 5:10 PM

Oracle Poratal Security Or Portal Security Infrastructure

Similar Messages

Maybe you are looking for