Creating Default Groups for WebLogic Resources Creating Default Security Roles for WebLogic Resources Creating Default Security Policies for WebLogic Resources

Design Considerations 3-25

3.6.4 Creating Default Groups for WebLogic Resources

When writing a runtime class for a custom Authentication provider, there are several default groups that you are required to create. Table 3–8 provides information to assist you with this task.

3.6.5 Creating Default Security Roles for WebLogic Resources

When writing a runtime class for a custom Role Mapping provider, there are several default global roles that you are required to create. Table 3–9 provides information to assist you with this task. Note: For more information about security provider databases, see Section 3.7, Initialization of the Security Provider Database. For more information about the toString method, see Section 3.6.3.1, The toString Method. Table 3–8 Default Groups and Group Membership Group Name Group Membership Administrators Empty, or an administrative user. Deployers Empty Monitors Empty Operators Empty AppTesters Empty OracleSystemGro up OracleSystemUser Table 3–9 Default Global Roles and Group Associations Global Role Name Group Association Admin Administrators group AdminChannelUser AdminChannelUsers, Administrators, Deployers, Operators, Monitors, and AppTesters groups Anonymous weblogic.security.WLSPrincipals.get EveryoneGroupname group CrossDomainConnector CrossDomainConnectors group Deployer Deployers group Monitor Monitors group Operator Operators group AppTester AppTesters group OracleSystemRole OracleSystemGroup Note: For more information about global and scoped security roles, see Users, Groups, and Security Roles in Securing Resources Using Roles and Policies for Oracle WebLogic Server. 3-26 Developing Security Providers for Oracle WebLogic Server

3.6.6 Creating Default Security Policies for WebLogic Resources

When writing a runtime class for a custom Authorization provider, there are several default security policies that you are required to create. These default security policies initially protect the various types of WebLogic resources. Table 3–10 provides information to assist you with this task.

3.6.7 Looking Up WebLogic Resources in a Security Providers Runtime Class