Create Stand-Alone Web Application URL Pattern Scoped Role
Use this page to specify a URL pattern in this Web application and to create a security role that can be used only in the policy that you have defined for the URL pattern.
Configuration Options
Name Description URL Pattern A string that represents the path to a Web application resource.
To secure a resource within the application, enter the path to the resource, for example:
/MyServlet.jsp
To secure the entire contents of a Web application contained in an EAR, enter a single slash:
/
- Caution:
- In WebLogic Server version 8.x the two characters
/ *
were used by the security container to indicate the entire Web application contents. In versions later than 8.x, Oracle recommends that you use the/
character, as it is the standard Java EE syntax used by the Servlet container. If you want to continue using/*
you need to disable theEnforceStrictURLPattern
field.Name The name of the scoped role.
Do not use blank spaces, commas, hyphens, or any characters in the following comma-separated list: \t, < >, #, |, &, ~, ?, ( ), { }. Security role names are case sensitive. All security role names are singular and the first letter is capitalized, according to convention. The proper syntax for a security role name is as defined for an
Nmtoken
in the Extensible Markup Language (XML) Recommendation.If you create a scoped role with the same name as a global role, the scoped role takes precedence over the global role.
Provider Name Lists all role mapper providers that support role editing though the console that have been configured for the realm.