Resolve Access Issues After Allow-Listing Your VB Studio IP Address

If you’ve added your VB Studio infrastructure IP address to the list of allowed IP addresses in your Web Application Firewall (WAF) and/or Location Based Access Control (LBAC) configuration and are now experiencing access issues, try one of these possible solutions:

• If you have LBAC enabled, but you haven’t added your VB Studio IP address to the LBAC allow list, your users may receive error messages that say: “We are not able to determine the status of environment <environment name>. We couldn’t retrieve the list of sandboxes from <instance name> due to “:Forbidden”.
• If you see an “Unauthorized” status in the Service Instances tab on VB Studio’s Environments page, the issue could be related to LBAC or WAF. However, it could also be an issue with your credentials not having access to the FA status endpoints. Only certain endpoints, not all of them, are protected by the LBAC configuration.

• Ask the Oracle Cloud Applications administrator to enable Cross-Origin Resource Sharing (CORS) by adding the VB Studio’s root URL to the Oracle Cloud Application’s ORA_CORS_ORIGINS profile option. This option is used to specify which domains can talk to each other.

  Note: Production to Test (P2T) and other operations that replace the database may cause the profile option value to change. If you perform any operation that replaces the database, you must repeat these steps.

  To enable CORS, the Oracle Cloud Applications admin must:

  1. Open VB Studio from the Oracle Cloud Applications instance and copy the VB Studio URL from the browser’s address bar.
  2. In the Oracle Cloud Applications instance, click Navigator .
  3. Under Others, click Setup and Maintenance.
  4. On the right side of the page, click Tasks, then click Search.
  5. In the search box, enter Manage Administrator Profile Values and click the Search icon.
  6. In the search results, click Manage Administrator Profile Values.
  7. In Profile Options Code, enter ORA_CORS_ORIGINS, then click Search.
  8. Under ORA_CORS_ORIGINS: Profile Values, click New.
  9. In Profile Level, select Site.

  10. In Profile Value, enter 'self' (including the single quotes), followed by VB Studio’s root URL. For example: 'self' https://abcd-test-DEVCSAPP-07012210-2070-abcd.developer.ocp.oraclecloud.com

      Note: Don’t include port numbers, wild cards, or extraneous characters after the root. For example, if the VB Studio’s full URL is: https://abcd-test-DEVCSAPP-07012210-2070-abcd.developer.ocp.oraclecloud.com:443/abcd-test-devcsapp-07012210-2070-abcd Then the root is simply https://abcd-test-DEVCSAPP-07012210-2070-abcd.developer.ocp.oraclecloud.com.

      Your screen should look something like this:
      

      Description of the illustration oraclecloudapps-vbstudio-root.png

  11. Before you finish the CORS setup, you should check the CORS headers to be added. Although all of the other CORS options should be configured by default, in every pod, some of these settings may be missing or may have been erased inadvertently. See Configure Cross-Origin Resource Sharing for additional information about all the settings that can be configured, including a list of acceptable values for each option.
  12. Click Save and Close.
• If you are still experiencing problems, contact your Oracle Support representative and file an SR so Oracle can assist you in setting up access to VB Studio.