Sunday, January 8, 2012

ADF Security Artifacts

Following are the files that get modified when ADF Security is Enabled:
1.adf-config.xml :
As Security is enabled for an application, adf_config.xml (Configuration file) will get modified. Verify the JassSecurityContext property for the file after enbling the security. JaasProviderClass property refrences the SecurityContext implementation used by the application. Programatically, the same SecurityContext object is used through out the application in Expression Language for authorization and authentication
2.jps-config.xml:
This is a OPSS Security platform configuration file. Web applications use the jps-config.xml file of the domain. J2Se application like Business Component tester will use this file within the application.
3.jazn-data.xml:
While developing, this file contains all the data related to Users,Roles and Grants. This is the Identity store as well as the Policy store (file based) This file based Identity and Policy store would be used extensively while developing. Realtime, LDAP servers would be used for identity store and policy stores
4. web.xml:
This file gets modified with Authentication type and the Authentication Servlet Configuration. Also, this file contains the default login and error pages. This file determines if anonymous role is available for the application
5.weblogic.xml:
There are some roles that can be created in web.xml file (If im not wrong, they are called logical roles) This file maps the roles in the web.xml to the roles in the WLS. Note: Not very clear about this file. Will have to work on it. Tagging it as ToDo

No comments: