Policy Evaluation Not Working Properly For Certain Resources

(Doc ID 2093244.1)

Last updated on DECEMBER 30, 2015

Applies to:

Oracle Access Manager - Version 11.1.2.0.0 and later
Information in this document applies to any platform.

Symptoms

Two resource definitions using pattern exists, where one resource element
is part of both definitions.

example:
/{p1/pp1,p2/pp2,p3/pp3,upol/upol_ssop1,upol/upol_ssop4}/**
and /p1/pp1/**

Here /p1/pp1/** is part of both patterns.

If the resource "/upol/upol_ssop4/index.html" is accessed,
the authorization policy associated with the second resource "/p1/pp1/**"
is applied.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms