Oracle Cloud PaaS ADF security

How to secure ADF Fusion Web Applications in Oracle Cloud PaaS

  1. Create datasource for your security database
  2. Create new authentication provider Sufficient SQLAuthentication using defined datasource
  3. Use the page MyRealm->Configuration->Provider Specific to define the provider specific configuration of this SQL Authentication provider: SELECT ENCRYPTED_USER_PASSWORD FROM KRI_USERS WHERE USER_NAME = ?
    UPDATE KRI_USERS SET ENCRYPTED_USER_PASSWORD = ? WHERE USER_NAME = ?
    SELECT USER_NAME FROM KRI_USERS WHERE USER_NAME = ?
    SELECT USER_NAME FROM KRI_USERS WHERE USER_NAME LIKE ?
    INSERT INTO KRI_USERS (USER_ID, USER_NAME, ENCRYPTED_USER_PASSWORD, DESCRIPTION, LAST_UPDATE_DATE, LAST_UPDATED_BY, CREATION_DATE, CREATED_BY) VALUES (KRI_USERS_S.NEXTVAL, ? , ? , ? , SYSDATE, ‘anonymous’, SYSDATE, ‘anonymous’)
    DELETE FROM KRI_USERS WHERE USER_NAME = ?
    SELECT G_NAME FROM KRI_GROUPS WHERE G_NAME LIKE ?
    SELECT G_NAME FROM KRI_GROUPS WHERE G_NAME = ?
    INSERT INTO KRI_GROUPS (G_NAME, G_DESCRIPTION, LAST_UPDATE_DATE,CREATION_DATE, LAST_UPDATED_BY, CREATED_BY)VALUES ( ? , ? , SYSDATE,SYSDATE, ‘anonymous’, ‘anonymous’)
    DELETE FROM KRI_GROUPS WHERE G_NAME = ?
    SELECT KU.USER_NAME FROM KRI_GROUP_MEMBERS KGM, KRI_USERS KU WHERE G_NAME = ? AND KU.USER_NAME = ? AND KGM.USER_ID= KU.USER_ID
    SELECT G_NAME FROM KRI_GROUP_MEMBERS KGM, KRI_USERS KU WHERE KU.USER_NAME = ? AND KGM.USER_ID= KU.USER_ID
    SELECT KU.USER_NAME FROM KRI_GROUP_MEMBERS KGM, KRI_USERS KU WHERE KGM.G_NAME = ? AND KU.USER_NAME LIKE ? AND KGM.USER_ID= KU.USER_ID
    DELETE FROM KRI_GROUP_MEMBERS KGM WHERE EXISTS (SELECT USER_NAME FROM KRI_USERS KU WHERE KGM.USER_ID= KU.USER_ID AND KU.USER_NAME = ?) OR KGM.G_NAME = ?
    INSERT INTO kri_group_members (g_name, user_id, last_update_date, last_updated_by, creation_date, created_by) SELECT ?, user_id, SYSDATE, ‘anonymous’, SYSDATE, ‘anonymous’ FROM kri_users WHERE user_name = ?
    DELETE FROM KRI_GROUP_MEMBERS KGM WHERE G_NAME = ? AND EXISTS (SELECT USER_NAME FROM KRI_USERS KU WHERE KGM.USER_ID= KU.USER_ID AND KU.USER_NAME = ?)
    DELETE FROM KRI_GROUP_MEMBERS WHERE G_NAME = ?
    SELECT DESCRIPTION FROM KRI_USERS WHERE USER_NAME = ?
    UPDATE KRI_USERS SET DESCRIPTION = ? WHERE USER_NAME = ?
    SELECT G_DESCRIPTION FROM KRI_GROUPS WHERE G_NAME = ?
    UPDATE KRI_GROUPS SET G_DESCRIPTION = ? WHERE G_NAME = ?
  4. Program your user, roles and group maintenance or use weblogic console to modify your jazn_data
  5. Secure ADF application using Jdeveloper Application menu.
  6. Remember to Not deploy testing jazn_data into production environment.

You do not need to do this to extend Oracle Cloud SaaS applications like HCM Sales or so. It’s all managed by the identity domain and your JCS SX PaaS.

Leave a Comment

Your email address will not be published. Required fields are marked *