WCP Framework 11g and SES 11g : search results are not secured

Question

Hello,
We are integrating WCP 11.1.1.6 and SES 11.1.2.2
we have quite a stunning issue here where the search results returned by a WCP Framework application are not secured, ie secured contents are returned in the search results for unauthenticated users and for users who have no permission on these contents.
Though, the search results are well secured in the standard SES search interface (http://seshost/search/query/).
The main concern is about results coming from WCC.
Thanks for any help,
Vince

Answer 1

Hi Jiri,
we managed to integrate UCM and WCP with Document Service taskflows and it works fine, ie security is well propagated for the roles we want.
WCC/UCM and WCP authenticate users via WLS which is connected to an AD.
SES has its own identity management system which authenticates users directly to the AD.
We activated the SESCrawler component in WCC/UCM and the SES/UCM crawling process is OK.
We can search for UCM contents in SES without issue and anonymous/unauthenticated search in SES doesn't return results from non-public security groups, which is what we want.
WCP search is connected to SES (which is the default setting), eg from adf-config.xml:
<searchC:adf-search-config xmlns="http://xmlns.oracle.com/webcenter/search/config">
<display-properties>
<common numSavedSearches="5" />
<region-specific>
<usage id="simpleSearchResultUIMetadata" numServiceRows="5" />
<usage id="searchResultUIMetadata" numServiceRows="5" />
<usage id="localToolbarRegion" numServiceRows="5" />
</region-specific>
</display-properties>
<execution-properties timeoutMs="7000" prepareTimeoutMs="1000" />
<crawl-properties fullCrawlInterval="P5D" enableWcServicesCrawl="true" enableWcDiscussionsCrawl="true" enableWcUcmCrawl="true" />
<ses-properties>
<connection>ses</connection>
<data-group>SourceGroup</data-group>
</ses-properties>
</searchC:adf-search-config>
So the problem is that anonymous/unauthenticated search in WCP does return results from non-public security groups, which is not what we want.
eg: access to the WCP app (don't logon)
run a search
in the search results, you can see contents which are not assigned in the public security group. Though, the WCC/UCM guest role doesn't have any permission on these SG.
I can't raise SR myself.
Thanks for any help,