About Entitlement Grants in ADF Security of JDeveloper 11.1.1.4
- by frank.nimphius
Normal
0
false
false
false
EN-US
X-NONE
X-NONE
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
Oracle JDeveloper 11.1.1.4 comes with a new ADF Security feature
called "entitlement grants". This has nothing to do with Oracle
Entitlement Server (OES) but is the ability to group resources into permission
sets so they can be granted with a single grant statement. For example, as good
practices when organizing your projects, you may have grouped your bounded task
flows by functionality and responsibility in sub folders under the WEB-INF
directory. If one of the folders holds bounded task flows that are accessible
to all authenticated users, you may create an entitlement grant allAuthUserBTF and select all bounded
task flows that are accessible for authenticated users as resources. You can then
grant allAuthUserBTF to the authenticated-role so that with only a
single grant statement all selected bounded task flows are protected.
Normal
0
false
false
false
EN-US
X-NONE
X-NONE
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
<permission-sets>
<permission-set>
<name>PublicBoundedTaskFlows</name>
<member-resources>
<member-resource>
<resource-name>
/WEB-INF/public/home-btf.xml#home-btf
</resource-name>
<type-name-ref>TaskFlowResourceType</type-name-ref>
<display-name> ... </display-name>
<actions>view</actions>
</member-resource>
<member-resource>
<resource-name>
/WEB-INF/public/preferences-btf.xml#preferences-btf
</resource-name>
<type-name-ref>TaskFlowResourceType</type-name-ref>
<display-name>...</display-name>
<actions>view</actions>
</member-resource>
</member-resources>
</permission-set>
</permission-sets>
The grant statement for this permission set is added as
shown below
<grant>
<grantee>
<principals>
<principal>
<name>authenticated-role</name>
<class>oracle.security.jps.internal.core.principals.JpsAuthenticatedRoleImpl</class>
</principal>
</principals>
</grantee>
<permission-set-refs>
<permission-set-ref>
<name>PublicBoundedTaskFlows</name>
</permission-set-ref>
</permission-set-refs>
</grant>
