OPSS - Unable run grantPermission script due to some console command lenght limitation (Doc ID 2264503.1)

Last updated on MAY 18, 2017

Applies to:

Oracle Platform Security for Java - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

After get some OIM console issue, and observing some "java.security.AccessControlException: access denied" messages in log

Following the access denied troubleshooting document

  Troubleshooting java.security.AccessControlException: access denied due to oracle.security.jps.service.credstore.CredentialAccessPermission Exception when Running Credential Store API Code (Doc ID 1327577.1)

Unable run the grantPermission(....) script, to add missing permissions for

  java.security.AccessControlException: access denied ("oracle.security.jps.service.policystore.PolicyStoreAccessPermission")....

  java.security.AccessControlException: access denied ("oracle.adf.share.security.authorization.RegionPermission")....

  java.security.AccessControlException: access denied ("oracle.adf.controller.security.TaskFlowPermission")...

Apparently there is a command line length limitation, after connect with Admin server in wlst, seeing:

wls:/OIMDomain/serverConfig> grantPermission(codeBaseURL="file:/u01/app/Oracle/Middleware/oracle_common/modules/org.springframework_2.5.jar",permClass="oracle.security.jps.service.policystore.PolicyStoreAccessPermission",permTarget="context=APPLICATION,name=OIM",permActions="getApplica

Unable to complete the script

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms