Adding a Grant to bpm-services.jar

This procedure is required in a distributed environment when Financial Close Management and SOA are configured on different machines. Perform this procedure on all machines with managed servers in the WebLogic domain.

  To add a grant to bpm-services.jar:

  1. Make a backup copy of domain/config/fmwconfig/system-jazn-data.xml.

  2. Edit system-jazn-data.xml to include the following grant for bpm-services.jar:

    <grant>
       <grantee>
           <codesource>
               <url>file:${soa.oracle.home}/soa/modules/oracle.soa.workflow_11.1.1/bpm-services.jar</url>
           </codesource>
       </grantee>
       <permissions>
           <permission>
               <class>oracle.security.jps.JpsPermission</class>
               <name>VerificationService.createInternalWorkflowContext</name>
           </permission>
           <permission>
               <class>oracle.security.jps.service.credstore.CredentialAccessPermission</class>
               <name>credstoressp.credstore.BPM-CRYPTO.BPM-CRYPTO</name>
               <actions>read,write</actions>
           </permission>
           <permission>
               <class>oracle.security.jps.JpsPermission</class>
               <name>IdentityAssertion</name>
               <actions>*</actions>
           </permission>
       </permissions>
   </grant>

  3. Restart all managed servers.