Set up permissions for the credential store

You create security grants in the Oracle WebLogic Server console to enable the Oracle Empirica Signal application to access the credential store. Otherwise, the application cannot start, and users cannot log in.

1. In a Web browser, navigate to Oracle Enterprise Manager console, for example:

   https://< server_name >:7002/em

2. Log in using the Oracle WebLogic Server administrator credentials provided to you by the system administrator.

   The Oracle Enterprise Manager console appears.

3. Below the page title, expand the WebLogic Domain menu, select Security, and then select System Policies.

   The System Policies page appears.

4. Create a security grant for the Oracle Empirica Signal codebase.
   1. In the System Policies table, click Create.

      The Create System Grant page appears.

   2. In the Codebase field, enter the case-sensitive codebase, for example:

      file:${oracle.deployed.app.dir}/Signal${oracle.deployed.app.ext}

5. Add a permission to the security grant for Oracle Empirica Signal.
   1. Click Add.

      The Add Permission page appears.

   2. At the bottom of the page, select Select here to enter details for a new permission.
   3. Fill in the fields as follows.
      • Permission Class—oracle.security.jps.service.credstore.CredentialAccessPermission
      • Resource Name —context=SYSTEM,mapName=<MAP_NAME>,keyName=*

        where <MAP_NAME> is the map you created for the Oracle Empirica Signal application credentials, for example, oracle.hsgbu.empiricasignal.

        For more information, see Store the Oracle Empirica Signal database and Oracle Empirica Topics credentials in Oracle Enterprise Manager.

      • Permission Actions—read.
   4. Click OK.

      The Create System Grant page reappears.

   5. Click OK.

      The permission is saved, and the System Policies page reappears.

6. Search for the security grant you just created:
   1. From the Name drop-down list, select Includes.
   2. In the search field, enter Signal or the application context root.

      For more information, see Create the Oracle Empirica Signal deployment on the Oracle WebLogic Server.

   3. Click Search.

      The security grant appears in the table.

7. Create a security grant for the Oracle Empirica Signal WebLogic domain codebase based on the security grant you searched for.
   1. In the table, select the security grant, and click Create Like.

      The Create System Grant Like page appears.

   2. In the Codebase field, enter the case-sensitive codebase, for example:

      file:${domain.home}/servers/${weblogic.Name}/stage/Signal/Signal${oracle.deployed.app.ext}

   3. Click OK.

      The security grant is created.

8. Follow the previous two steps to create security grants for the following codebases.
   • Oracle Empirica Topics service codebase:

     file:${oracle.deployed.app.dir}/TopicsService${oracle.deployed.app.ext}

   • Oracle Empirica Topics WebLogic domain codebase:

     file:${domain.home}/servers/${weblogic.Name}/stage/TopicsService${oracle.deployed.app.ext}