WebLogic's RdbmsRealm get security info from DB not its properties file.
It also have in-memory cache to reduce database hit.
But it currently lacks refresh capability although that is not too hard to add
(in a non-clustered environment).  ACL for EJB is not controlled by the Realm
but by Deployment Descriptor AccessControlEntries.  You can change it and
redeploy without dropping the server.

cheers
chuck



Parikshit Pol wrote:

> Hi,
> I have a couple of queries regarding weblogic's security.
> 1.      Can we add users dynamically .And also can i modify my access
> control descriptors and ACLs (without redeploying and restarting the server
> ) so that various permissions can be given to the users just added .
> 2.      Also suppose if i add an user in the database , and i want to define
> access rights for the user for a particular table. Supposing i would be able
> to do so using jdbc , can i create a dynamic connection pool using that user
> and use that pool for my beans to access the database .
>
>         R> regarding the adding , deletion and moving the users, there is
>         > problem.
>         > Weblogic allows to define roles, users and permisssions in the
> weblogic
>         > properties file, and acls can be define in deployment descripter.
>         > On changing the properties file, ie users or roles, one has to
> restart the
>         server.Also i ve to change the properties file manually,
>         I may not be knowing the other way, if you can please let me know.
>
> Thanks and regards,
>
> Parikshit Pol
> KPIT Systems. Ltd.
>
> ===========================================================================
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> of the message "signoff EJB-INTEREST".  For general help, send email to
> [EMAIL PROTECTED] and include in the body of the message "help".

===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff EJB-INTEREST".  For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".

Reply via email to