Oracle Application Server 10.1.3.5 Security issue.
- by Marius Bogdan IONESCU
Hello!
we are tying to port a J2EE app from OAS 9.0.4 (working perfectly) on OAS 10.1.3.5
the reson we do that is because we need the app compiled with java 1.5 and OAS 10.1.3.5 would be the single major version supporting that binaries which has oc4j/orion kernel.
The issue is that the security constraints in matter of user/group/role are not read by the app server, and instead of asking for these sets of users, i have to use the oc4jadmin instead the selected users for auth. All xml files needed for describing these sets of rules are being checked with the OAS book, and it seems they are correctly filled in... anybody has an idea about this?