Oracle® Retail Integration Cloud Service Implementation Guide Release 19.1.000 F31983-04 |
|
![]() Previous |
![]() Next |
Security in the integration layer is a big concern for every retail enterprise. The security system should be open enough to allow trusted remote applications to integrate easily and, at the same time, lock down unauthorized remote access. To address security concerns, RIB utilizes the security modules available in the Oracle middle ware and database systems.
There are two categories of administrators in RIB: RIB System Administrators and RIB Application Administrators. RIB System Administrators are involved in installing, configuring, deploying defect fixes, and making sure that the integration infrastructure is up and running properly. They generally are concerned with the business side of the integration system. Their tasks include bringing up or taking down RIB adapters, and fixing data issues with message payloads using RIHA. There are separate realms, roles, groups, and users defined for each category of RIB administrators.
WebLogic server has a default security realm. For each rib-<app>.ear deployed, RIB creates the users in the default security realm belonging to the below groups:
ribAdminGroup
ribOperatorGroup
ribMonitorGroup
The default groups and user that RIB creates must not be deleted or modified.
RIB follows a role-based authorization for allowing valid users to perform a defined set of operations from the rib-admin-gui. The user belonging to each of above groups will be associated with a well defined role and thus able to perform authorized operations only. It is recommended that you have a unique user belonging to each group.
The RIB System Administrators focus primarily on managing access to the RIB JMS server, application server instances, RIB Hospital database, and the rib-home workspace. RIB must be deployed with the default WebLogic admin user.
Note: For more information about security, see Oracle Retail Integration Bus Security Guide or see Chapter 7, "RIB Security," in the Oracle Retail Integration Bus Installation Guide. |