The Architecture of WebLogic Resources Types of WebLogic Resources

3-22 Developing Security Providers for Oracle WebLogic Server The following sections provide information about security providers and WebLogic resources: ■ Section 3.6.1, The Architecture of WebLogic Resources ■ Section 3.6.2, Types of WebLogic Resources ■ Section 3.6.3, WebLogic Resource Identifiers ■ Section 3.6.4, Creating Default Groups for WebLogic Resources ■ Section 3.6.5, Creating Default Security Roles for WebLogic Resources ■ Section 3.6.6, Creating Default Security Policies for WebLogic Resources ■ Section 3.6.8, Single-Parent Resource Hierarchies ■ Section 3.6.9, ContextHandlers and WebLogic Resources

3.6.1 The Architecture of WebLogic Resources

The Resource interface, located in the weblogic.security.spi package, provides the definition for an object that represents a WebLogic resource, which can be protected from unauthorized access. The ResourceBase class, located in the weblogic.security.service package, is an abstract base class for more specific WebLogic resource types, and facilitates the model for extending resources. See Figure 3–10 and Section 3.6.2, Types of WebLogic Resources for more information. Figure 3–10 Architecture of WebLogic Resources Note: Security policies replace the access control lists ACLs and permissions that were used to protect WebLogic resources in previous releases of WebLogic Server. Note: For more information, see Securing Resources Using Roles and Policies for Oracle WebLogic Server. Design Considerations 3-23 The ResourceBase class includes the Oracle-provided implementations of the getID, getKeys, getValues, and toString methods. For more information, see the WebLogic Server API Reference Javadoc for the ResourceBase class. This architecture allows you to develop security providers without requiring that they be aware of any particular WebLogic resources. Therefore, when new resource types are added, you should not need to modify the security providers.

3.6.2 Types of WebLogic Resources

As shown in Figure 3–10, Architecture of WebLogic Resources , certain classes in the weblogic.security.service package extend the ResourceBase class, and therefore provide you with implementations for specific types of WebLogic resources. WebLogic resource implementations are available for: ■ Administrative resources ■ Application resources ■ COM resources ■ Control resources ■ EIS resources ■ EJB resources ■ JDBC resources ■ JMS resources ■ JNDI resources ■ Remote resources ■ Server resources ■ URL resources ■ Web service resources ■ Work Context resources

3.6.3 WebLogic Resource Identifiers