Matthew Clemmons's Profile

ADF Security is configured
in system-jazn-data.xml file of the embedded OC4J server in Oracle JDeveloper

ADF Security is configured
in system-jazn-data.xml file of the embedded OC4J server in Oracle JDeveloper

ADF Security is configured
in system-jazn-data.xml file of the embedded OC4J server in Oracle JDeveloper

ADF Security is configured
in system-jazn-data.xml file of the embedded OC4J server in Oracle JDeveloper

JAZN implements container-managed
J2EE security in OC4J and is the default policy provider for JAAS
(Java Authentication and Authorization Service)

ADF Security runs within OC4J as part of the Oracle
ADF runtime libraries and leverages JAAS for authorization to implement
fine-grained access control

ADF Security supports both JAZN file-based security and the LDAP security provider
for authentication and authorization

If authorization is enforced for web applications, the repository location
must be chosen as OC4J Default Repository, which points to the
system-jazn-data.xml file in the OC4J configuration.

If an ADF Faces application is configured to use the JAZN XML provider,
then authentication is performed against user accounts defined in the
system-jazn-data.xml file. If the LDAP provider is configured,
then the authentication realm and user accounts are looked up in OID.

J2EE security roles are defined in the web.xml deployment descriptor
and mapped to users and groups in the system-jazn-data.xml file.
If the role name in web.xml matches a group name in system-jazn-data.xml,
no further mapping is required. If the names do not match, then the web.xml role name needs to be mapped to the name in the system-jazn-data.xml using
the orion-application.xml file. The orion application file is
automatically created and deployed with the J2EE application.

Finishing the ADF Security wizard writes the configuration information
to the web.xml deployment descriptor and the orion-application.xml file.

The configuration file used for ADF Security development and
testing in Oracle JDeveloper is system-jazn-data.xml. The system-jazn-data.xml is an XML-based security repository for Oracle JAAS and contains
user accounts and passwords, user groups, and ADF Security JAAS permissions.

To configure the system-jazn-data.xml file for ADF Security
from the Oracle JDeveloper IDE, choose the Tools |
Embedded OC4J Server Preferences menu option

A context menu option Edit Authorization on all bindings that
can have authorization defined

Defining grants on the PageDef.xml file permits developers
to set up page-level authorization, a security feature otherwise not available
in JavaServer Faces.

The PermissionInfo object on the ADF Security Context allows
access to ADF Security through Expression Language and Java