How Oracle Application Development Team Can Use Oracle Adf Development Security Services?

By Author: Dharmesh Aegis
Total Articles: 105
Comment this article

Java EE developers have always depended on container-managed security and Java authentication and Authorization Services to execute security in different applications. To ensure that security is properly implemented across Oracle Fusion Middleware applications and Oracle Application Development Framework, Oracle offers an integrated security environment that capitalizes on the underlying standards of Java EE and is portable across application servers.
The Oracle ADF development security functionality offers a visual and declarative development environment to integrated Oracle platform based security services into Oracle ADF applications. Oracle platform security services and Oracle ADF Security together enable developers to concentrate on what needs to be protected rather than how it should be protected.
An Overview on Oracle ADF development and Oracle Platform Security Services
In order to fully understand the security aspect of Oracle Application Development, it is important to look into three main concepts, which include user identities, application roles and enterprise roles.
User ...
... Identities help in identifying users within an enterprise. Users can include company employees who possess username and password pair that they use to authenticate when logging into certain applications within the organization. A user identity helps in defining who the user is but it definitely does not define any kind of privileges related to access.
In order to simplify the deployment of the system, often administrators arrange users into enterprise roles that provide a way to handle groups of users who share similar requirements when accessing different types of enterprise resources. For instance, employees can be grouped into an enterprise role known as Employees to allow them access to different employee self-service applications within an enterprise. Through an administrative point of view, it is much simpler to add users to an enterprise role than maintaining individual user grants.
Application roles on the other hand are extremely specific and are primarily used to allow privileges to users that are defined in enterprise roles. Application roles do ensure that users belonging to an enterprise role enjoy specific access privileges that are particularly defined for different applications. It is important that the application role is granted to the enterprise role for the users to work with applications within an enterprise. These application roles within Oracle application development can be granted to the users directly; however this is not considered a good practice and is usually avoided.
When a sample Oracle ADF development application is created, it is tested through the usage of Oracle WebLogic Server, which is integrated with Oracle JDeveloper. Security policies are defined jazn-data(dot)xml and then copied onto the system-jazn-data(dot)xml policy file in the config\fmwconfig directory of the target Oracle WebLogic Server domain. In this instance, user identities and enterprise roles defined in the jazn-data(dot)xml file are deployed to the integrated Oracle WebLogic Server in Oracle JDeveloper.
In a production environment, user identities and enterprise roles are defined in the application jazn-data.xml file and usually they cannot be deployed to Oracle WebLogic Server instances. Instead, user authentication is conducted along with the identity management system established for the enterprise on the production server. Some of the most well known mechanisms include LDAP, Oracle Internet Directory, RDBMS and Microsoft’s Active Directory.
For More Info:- Java Developers || Oracle Application Development