Looking Up WebLogic Resources in a Security Providers Runtime Class

3-26 Developing Security Providers for Oracle WebLogic Server

3.6.6 Creating Default Security Policies for WebLogic Resources

When writing a runtime class for a custom Authorization provider, there are several default security policies that you are required to create. These default security policies initially protect the various types of WebLogic resources. Table 3–10 provides information to assist you with this task.

3.6.7 Looking Up WebLogic Resources in a Security Providers Runtime Class

Example 3–2 illustrates how to look up a WebLogic resource in the runtime class of an Authorization provider. This algorithm assumes that the security provider database for the Authorization provider contains a mapping of WebLogic resources to security policies. It is not required that you use the algorithm shown in Example 3–2 , or that Table 3–10 Default Security Policies for WebLogic Resources WebLogic Resource Constructor Security Policy new AdminResourcenull, null, null Admin global role new AdminResourceConfiguration, null, null Admin, Deployer, Monitor, or Operator global roles new AdminResourceFileDownload, null, null Admin or Deployer global role new AdminResourceFileUpload, null, null Admin or Deployer global role New AdminResourceViewLog, null, null Admin or Deployer global role new ControlResourcenull, null, null weblogic.security.WLSPrincipals .getEveryoneGroupname group new EISResourcenull, null, null weblogic.security.WLSPrincipals .getEveryoneGroupname group new EJBResourcenull, null, null, null, null, null weblogic.security.WLSPrincipals .getEveryoneGroupname group new JDBCResourcenull, null, null, null, null weblogic.security.WLSPrincipals .getEveryoneGroupname group new JNDIResourcenull, null, null weblogic.security.WLSPrincipals .getEveryoneGroupname group new JMSResourcenull, null, null, null weblogic.security.WLSPrincipals .getEveryoneGroupname group new ServerResourcenull, null, null Admin or Operator global roles new URLResourcenull, null, null, null, null weblogic.security.WLSPrincipals .getEveryoneGroupname group new WebServiceResourcenull, null, null, null weblogic.security.WLSPrincipals .getEveryoneGroupname group new WorkContextnull, null weblogic.security.WLSPrincipals .getEveryoneGroupname group Note: Application and COM resources should not have default security policies that is, they should not grant permission to anyone by default. Design Considerations 3-27 you utilize the call to the getParentResource method. For more information about the getParentResource method, see Section 3.6.8, Single-Parent Resource Hierarchies.