Technical data

Defining ACLs
Administration Guide 14-45
Note: When you specify an ACL for a JDBC connection pool, you must specifically
define access to the JDBC connection pool for the
system and guest user in
the
filerealm.properties file. For example:
acl.reserve.poolforsecurity=system, guest
acl.reset.poolforsecurity=system, guest
To create ACLs for a WebLogic Server resource, open the Administration Console and
perform the following steps:
1. Go to the Security
→ACLs node in the left pane of the Administration Console.
2. In the right pane of the Administration Console, click the Create a New ACL
link.
The ACL Configuration window appears.
3. Specify the name of WebLogic Server resource that you want to protect with an
ACL in the New ACL Name field.
For example, create an ACL for a JDBC connection pool named
demopool.
4. Click Create.
5. Click on the Add a New Permission link.
6. Specify a permission for the resource.
You can either create separate ACLs for each permission available for a resource
or one ACL that grants all the permissions for a resource. For example, you can
create three ACLs for the JDBC connection pool,
demopool: one with reserve
permission, one with
reset permission, and one with shrink permission. Or
you can create one ACL with
reserve, reset, and shrink permissions.
7. Specify Users or Groups that have the specified permission to the resource.
8. Click Apply.
When creating ACLs for resources in WebLogic Server you need to use the syntax in
Table 14-16 to refer to the resource.
If you modify an existing ACL, click the Refresh button on the General tab in the
Security node to update the information in the
filerealm.properties file that
WebLogic Server uses.