weblogic12c - Weblogic 12 - Changing Scoped Role to Group mapping in the deployed application -


our current application uses jsf/jpa technology , deployed on weblogic 12.1.2 , following:

  1. authenticates user through idp
  2. the idp after authenticating user sends groups user belong to
  3. using web.xml , weblogic.xml map groups roles

our application scoped roles granular , helps following:

  1. hide ui pages or components on ui
  2. use rolesallowed annotation on methods

since group role mapping in weblogic.xml, our application users can't change groups roles mapping , problem have solve.

my goal following:

  1. authenticate user through our idp
  2. the idp send groups user belongs to
  3. define roles in web.xml
  4. define tables our application read find group role mapping
  5. use weblogic api group role mapping
  6. create ui allow our users change group role mapping

the problem running can't find how group role mapping dynamically using weblogic since can't access weblogic api allow me change group role mapping in deployed application. has done before?

i have looked @ creating custom role mapper not sure how handle custom role mapper in our deployed application.

as of java ee 7, not possible based on thread dynamic roles on java ee server

if want feature added java ee 8 please vote following 2 open feature requests in java ee 8

https://java.net/jira/browse/javaee_security_spec-8 https://java.net/jira/browse/jaspic_spec-22


Comments

Popular posts from this blog

sublimetext3 - what keyboard shortcut is to comment/uncomment for this script tag in sublime -

java - No use of nillable="0" in SOAP Webservice -

ubuntu - Laravel 5.2 quickstart guide gives Not Found Error -