Search This Blog

Saturday, September 17, 2011

SOA /OSB11g Read only Access


Read only access for Weblogic Console

Step1:

Login to SOA weblogic console as administrator


Step2:

Click security realms link 


Step3:

Click my realm


Step4:

Click users and groups tab and click on new button 



Step5:

Click users and groups tab and click on new button

Enter details as shown below and click ok.[Password: fusion_read_only]


Step6:

Click “fusion_read_only” link 



Step7:

Click “Groups” tab


Step8:

Select Monitors from Parent Groups and enable the check box.Click on Save. Logout.



Step9:


Relogin as “fusion_read_only” and verify the read-only console




Read Only User can/cannot perform the following in weblogic console

·         can see log files
·         cannot add data sources, connection factories
·         cannot edit security configuration
·         cannot perform cluster related activities
·         cannot deploy new applications, cannot start/stop applications
·         cannot edit resource adapters



Read only access for EM Console

Step1:

Login as administrator.

Step2:

Right Click on soa-infra. Click on Application Roles


Step3:

Click search application roles [right arrow button]


Step4:

Click the SoaMonitor link


Step5:

Click add user button


Step6:

Click add user button. Move fusion _read_only to Selected Users category. Check the fusion_read_only. Press Ok


Step7:

Login as “fusion_read_only” and verify the read only console



Read Only User can/cannot perform the following in Oracle Service Bus console

• can monitor the performance of the soa server
• can see the log files,but cannot change the log configuration
• cannot create/edit/delete partition
• cannot start/stop composites inside the partition
• can create an instance of the composite
• cannot execute unit tests
• cannot change input payload validation settings
• can see policies attached to the composite, but cannot create/delete security policies
• can see business events,but cannot raise business events
• cannot change audit level
• can see system MBean properties.It allows screen editing,but on clicking "apply" button, it throws security error
• cannot change any of the soa-infrastructure properties
• can see list of security policies, but cannot create/edit/delete
• cannot deploy/undeploy composite
• can see the instance and audit details
• cannot perform fault recovery
• can see the fault and rejected messages



Read only access for OSB Console


Pre-requisites : Create User and assign a User Group
Login to weblogic console of OSB as administrator.

Follow steps 1-8 from pages 1 to 4

Step1:

Login as administrator in the OSB console

Step2:

Click security configuration at the bottom left navigation bar. Click add new button


Step3:

Fill in the appropriate details and select IntegrationMonitors from available Groups to Current Groups. Click Save button. 

Step4:

Relogin as “fusion_read_only” and verify the read-only console


Read Only User can/cannot perform the following in Oracle Service Bus console

• can see alerts and statistics
• can see dashboard page
• can search for services
• cannot create/discard/activate change center sessions
• cannot view changes in the session made by others
• can view proxy & business services
• cannot create/update/delete proxy & business services
• can see the message flow of the proxy service,but cannot edit it
• cannot create/update/delete WSDLs,but can view it
• cannot create/update/delete XML schemas,but can view it
• cannot create/update/delete XQueries,but can view it
• cannot add jar files
• cannot create/update/delete projects
• cannot test/debug proxy service
• cannot add/edit/delete users and groups
• cannot change any of the security configuration
• cannot import/export resources




 

Friday, September 16, 2011

SOA11g Business Event - Consumer fails to get created

Problem:
In SOA 10g, Consumer gets created in EBS instance during the deployment of a BPEL process. Where as in 11g, consumer is created on an EBS instance, during the design time of a service. So, if an already existing process is being used for a different EBS instance the .sql script has to be run manually.
Otherwise business events are not getting dequeued because consumer is not created

Solution:
Oracle has provided a patch OOB 12375483 for 11.1.1.5 version. This can be download from My Oracle Support and installed in the managed servers. If the managed servers are cluster installation having 2 nodes then, this patch has to be applied on both the nodes.