Implementing Security - Oracle ADF 11gR2 Development Beginner's Guide - page 217

jazn-data.xml
This file is primarily a policy store. The default security realm is added to this file in the same
folder. The security realm is determined by the file in the WebLogic server domain using the
following code:
<jazn-realm default="jazn.com">
<realm>
<name>jazn.com</name>
</realm>
</jazn-realm>
When you run the EmpDirectoryApplication applicaion, you will get a dialog box
promping the user to enter the login informaion. Since we have not conigured any
username and password, we will provide weblogic as the username and weblogic1
as the password. Remember that we entered the username and password when the
integrated server was started for the irst ime.
When you log in, you will get the Error 401--Unauthorized message, which means that you
do not have permission to view the page you are trying to get access to. This error is seen
because we have set the No Automaic Grants opion from the Enable Automaic Grant
secion. The following topic will help you understand the security permissions.
Applying security permissions
The applying of security permissions is done by providing the user with the access to view
or by modifying the content in the page. For example, employees are given view access to
a page on the website but are restricted from having edit permission . This means they can
view the page as read only and cannot personalize the page or modify its content.
Security permissions for an ADF web applicaion are given to business objects, task lows,
pages, and page fragments. Pages and page fragments are protected through the respecive
page deiniion iles.