9 Security

Security in the integration layer is a big concern for every retail enterprise. The security system should be open enough to allow trusted remote applications to integrate easily and, at the same time, lock down unauthorized remote access. To address security concerns, RIB utilizes the security modules available in the Oracle middle ware and database systems.

There are two categories of administrators in RIB: RIB System Administrators and RIB Application Administrators. RIB System Administrators are involved in installing, configuring, deploying defect fixes, and making sure that the integration infrastructure is up and running properly. They generally are concerned with the business side of the integration system. Their tasks include bringing up or taking down RIB adapters, and fixing data issues with message payloads using RIHA. There are separate realms, roles, groups, and users defined for each category of RIB administrators.

RIB Application Administrators Security Domain

WebLogic server has a default security realm. For each rib-<app>.ear deployed, RIB creates a user in the default security realm. This realm defines a group called ribAdminGroup. By default, RIB creates a user that belongs to the ribAdminGroup and Administrators groups. The RIB System Administrators can manage rib-<app> application's users and access control through the WebLogic Server Administration Console. The default group and user that RIB creates must not be deleted or modified

RIB System Administrators Security Domain

The RIB System Administrators focus primarily on managing access to the RIB JMS server, application server instances, RIB Hospital database, and the rib-home workspace. RIB must be deployed with the default WebLogic admin user.

Note: For more information about security, see Oracle Retail Integration Bus Security Guide or see Chapter 7, "RIB Security," in the Oracle Retail Integration Bus Installation Guide.