Granting Policies to Anonymous and Authenticated Roles with WLST Scripts

Managing the Credential Store 10-3 select Enter Map of Property Name and Value Pairs radio button; to add a key-value pair, click Add Row, and then enter the Property Name, Value, and Confirm Value in the added arrow. Figure 10–1 illustrates the Create Key dialog used to create a generic key.

3. Click OK to return to the Credentials page. The new key is displayed under the

map icon corresponding to the map you selected. Figure 10–1 The Generic Key Dialog To edit a key: 1. Select a key from the table.

2. Click Edit to bring up the Edit Key dialog.

3. In that dialog, modify the key data as appropriate. In case of editing a generic key, use the red X next to a row to delete the corresponding property-value pair. Figure 10–2 illustrates the Edit Key dialog used to edit a generic key.

4. Click OK to save your changes and return to the Credentials page.

For specific considerations that apply to ADF applications only, see section How to Edit Credentials Deployed with the Application in Oracle Fusion Middleware Administrators Guide for Oracle Application Development Framework. 10-4 Oracle Fusion Middleware Application Security Guide Figure 10–2 The Edit Key Dialog To remove a key or a map: 1. Select the item from the table.

2. Click Delete and confirm the item’s removal.

10.4 Managing Credentials with OPSS Scripts

An OPSS script is either a WLST script, in the context of the Oracle WebLogic Server, or a WASAdmin script, in the context of the WebSphere Application Server. The scripts listed in this section apply to both platforms: WebLogic Application Server and WebSphere Application Server. An online script is a script that requires a connection to a running server. Unless otherwise stated, scripts listed in this section are online scripts and operate on a policy store, regardless of whether it is file-, LDAP-, or DB-based. There are a few scripts that are offline, that is, they do not require a server to be running to operate. Read-only scripts can be performed only by users in the following WebLogic groups: Monitor, Operator, Configurator, or Admin. Read-write scripts can be performed only by users in the following WebLogic groups: Admin or Configurator. All WLST scripts are available out-of-the-box with the installation of the Oracle WebLogic Server. WLST scripts can be run in interactive mode or in script mode. In interactive mode, you enter the script at a command-line prompt and view the response immediately after. In script mode, you write scripts in a text file with a py file name extension and run it without requiring input, much like the directives in a shell script. WASAdmin scripts can be run in interactive mode only. For details, see Oracle Fusion Middleware Third-Party Application Server Guide.