To add permissions to the policy being created, click Add in the Permissions To add users to the policy being created, click the button Add User in the

Managing the Policy Store 9-9

1. Click Create to display the Create System Grant page.

2. In the area Grant Details, select type of policy to create. The valid types are

Principal or Codebase. The UI differs slightly depending on the type chose. The steps below assume the selection Principal.

3. To add permissions to policy being created, click the button Add in the

Permissions area to display the Add Permission dialog. In this dialog choose a permission to add to the policy being created.

1. Use the Search area to query permissions matching a type, principal name, or

permission name. The result of the query is display in the table in the Search area. 2. To choose the permission to add, select a permission from the table. Note that, when a permission is selected, its details are rendered in the read-only Customize area.

3. Click OK to return to the Create System Grant page. The selected permission

is added to the table Permissions. 4. At any point, you can select a permission from the table and use the button Edit to change the characteristics of the permission, or the button Delete to remove from the list.

5. To add users to the policy being created, click the button Add User in the Grantee

area to display the Add User dialog. 1. Use the Search to display user names matching a pattern. The results of the query are displayed in the box Available Users.

2. Use the buttons in between the boxes to move users from the Available Users

box to the Selected Users box. 3. Click OK to return to the Create System Grant page. The users you have selected are added to the table Grantee.

6. To add groups to the policy being created, click the button Add Group in the

Grantee area to display the Add Group dialog.

1. Use the Search to display group names matching a specified pattern. The

results of the query are displayed in the box Available Groups. 2. Use the buttons in between the boxes to move roles from the Available Groups box to the Selected Groups box. 3. Click OK to return to the Create System Grant page. The groups you have selected are added to the table Grantee. 7. Click OK to return to the System Policies page. An message at the top of the page informs you the result of the operation. If successful, the policy is added to the table at the bottom of the page.

9.3 Managing Application Policies with OPSS Scripts

An OPSS script is either a WLST script, in the context of the Oracle WebLogic Server, or a WASAdmin script, in the context of the WebSphere Application Server. The scripts listed in this section apply to both platforms: WebLogic Application Server and WebSphere Application Server. An online script is a script that requires a connection to a running server. Unless otherwise stated, scripts listed in this section are online scripts and operate on a policy