Security problem about JCOM

Question

Hi,
Now we are using IIS/ASP page to connect to EJB. This is the code below:
Dim mobjHome
Dim mobjBean
dim mobjList
Private Function BindObjects()
Dim objTemp
'Handle errors
On Error resume next
'Initialize function value
BindObjects = True
'Access WebLogic Server. Set here to localhost, port 7001.
Set objTemp = GetObject("objref:TUVPVwEAAAAABAIAAAAAAMAAAAAAAABGABAAAAAAAABKaW50ZWdyYVRhbGtUb01lV2hhdHNBbGxUaGlzVGhlbhkAEgAHAGwAbwBjAGEAbABoAG8AcwB0AFsANwAwADAAMQBdAAAAAAAKAP//AAAAAAAAAAAAAA==:")
     if err.number>0 then
     BindObjects = False
     response.write "Error number:" & cstr(Err.Number) & "<BR>"
     response.write "Error Desc:" & Err.Description & "<BR>"
     'Notify user and end sub
     response.write "An error occurred while GetObject.<br>"
     exit function
     end if
'Bind the EJB AccountHome object via JNDI
Set mobjHome = objTemp.get("examplesServer:jndi:ejb20-containerManaged-AccountHome")
     if err.number>0 then
     BindObjects = False
     response.write "Error number:" & cstr(Err.Number) & "<BR>"
     response.write "Error Desc:" & Err.Description & "<BR>"
     'Notify user and end sub
     response.write "An error occurred while objTemp.Get.<br>"
     exit function
     end if
Set mobjBean = mobjHome.create()
     if err.number>0 then
     BindObjects = False
     response.write "Error number:" & cstr(Err.Number) & "<BR>"
     response.write "Error Desc:" & Err.Description & "<BR>"
     'Notify user and end sub
     response.write "An error occurred while mobjHome.create().<br>"
     exit function
     end if
'Find accounts with a balance > LARGE_BALANCE
Set mobjList = FindBigTypes(700)
     if err.number>0 then
     BindObjects = False
     response.write "Error number:" & cstr(Err.Number) & "<BR>"
     response.write "Error Desc:" & Err.Description & "<BR>"
     'Notify user and end sub
     response.write "An error occurred while FindBigTypes.<br>"
     exit function
     end if
'Exit before error code
Exit Function
End Function
There is an error occured when running
Set mobjHome = objTemp.get("examplesServer:jndi:ejb20-containerManaged-AccountHome")
It told me "Access denied". Is there any setting I need to do in Weblogic server?
Thank you!
Best regards!
Xianyu

Answer 1

ADF SecurityContext is populated after execution of "/adfAuthentication" servlet so you can't get roles with ADFContext.getCurrent().getSecurityContext().getUserRoles() in your login method.
Maybe you can retrieve roles with:
Set<Principal> allPrincipals = mySubject.getPrincipals();
for (Principal principal : allPrincipals) {
      if(principal instanceof WLSGroupImpl ) {
           roles.add(principal.getName());
(note that this will retrieve 'enterprise' roles and not application roles)
Dario