Sunday, May 12, 2013

WebCenter Imaging: Tip of the Day - grant permissions to domain credentials


It's been a while since the last post, so I wanted to put out a quick fix tip.

If you redeploy any of your ear files, let's say the imaging.ear in this example, you may lose access to your domain credential store.

You may see an error similar to this:

java.security.AccessControlException: access denied ("oracle.security.jps.service.credstore.CredentialAccess.security,keyName=ipmkey" "read")



To remedy this, try the following:


  1. Launch wlst.sh from the ECM home: <middleware_home>/Oracle_ECM1/common/bin/wlst.sh
  2. Connect to admin server: connect() (enter username, password and t3 uri to admin server)
  3. View the current credential: listCred(map='oracle.wsm.security',key='ipmkey')
  4. Grant the permissions: grantPermission(codeBaseURL="file:${domain.home}/servers/${weblogic.Name}/tmp/_WL_user/imaging/-", permClass="oracle.security.jps.service.credstore.CredentialAccessPermission", permTarget="context=SYSTEM,mapName=oracle.wsm.security,keyName=*",permActions="*")


Hope this helps!
-ryan