Granting Permissions to Access the Credentials Store

You must grant permissions to access the credentials store for the SOA Cluster, SOA and Service Bus Cluster, and Service Bus Cluster service types. This task only needs to be performed once for any Oracle WebLogic Server domain.

You must specify the following files for these service types:

  • adflib_osb_Utils.jar — Create an entry and then grant permissions (for the SOA Cluster, SOA and Service Bus Cluster, and Service Bus Cluster service types)

  • jca-binding-api.jar — Grant permissions (for the SOA and Service Bus Cluster and Service Bus Cluster service types)

Create an Entry and Grant Permissions to adflib_osb_Utils.jar

  1. Log in to Oracle Enterprise Manager Fusion Middleware Control.

  2. Expand Weblogic Domain in the left panel.

  3. Right click on the domain you want to modify and select Security > System Policies to display the System Policies page.

  4. In the System Policies page, expand Search.

  5. Click Create.

  6. In the Create System Grant page, enter the following value for Codebase:

    file:${common.components.home}/../osb/lib/osbconsoleEar/webapp/WEB-INF/lib/adflib_osb_Utils.jar

  7. Click Add under permissions.

  8. In the Add Permission page, click Select here to enter details for a new permission and enter the following:

    • Class: oracle.security.jps.service.credstore.CredentialAccessPermission

    • Resource Name: context=SYSTEM,mapName=oracle.wsm.security,keyName=*

    • Permission Action: *

  9. Click on OK to save the new permission.

  10. Click OK on the Create System Grant page to save the new grant.

Grant Permissions to jca-binding-api.jar

  1. Log in to Oracle Enterprise Manager Fusion Middleware Control.

  2. In the System Policies page, expand Search.

  3. For the Type select Codebase and for Name Includes enter "jca" and click the arrow button.

  4. Select jca-binding-api.jar in the search returned result and click Edit.

  5. In the Edit System Grant page, click Add.

  6. In the Add Permission page, click Select here to enter details for a new permission and enter the following:

    • Class: oracle.security.jps.service.credstore.CredentialAccessPermission

    • Resource Name: context=SYSTEM,mapName=oracle.wsm.security,keyName=*

    • Permission Action: *

  7. Click OK to save the new permission.