My Oracle Support Banner

OPSS - Unable run grantPermission script due to some console command length limitation (Doc ID 2264503.1)

Last updated on MARCH 01, 2023

Applies to:

Oracle Platform Security for Java - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

After get some OIM console issue, and observing some "java.security.AccessControlException: access denied" messages in log

Following the access denied troubleshooting document

  Troubleshooting java.security.AccessControlException: access denied due to oracle.security.jps.service.credstore.CredentialAccessPermission Exception when Running Credential Store API Code (Doc ID 1327577.1)

Unable run the grantPermission(....) script, to add missing permissions for

  java.security.AccessControlException: access denied ("oracle.security.jps.service.policystore.PolicyStoreAccessPermission")....

  java.security.AccessControlException: access denied ("oracle.adf.share.security.authorization.RegionPermission")....

  java.security.AccessControlException: access denied ("oracle.adf.controller.security.TaskFlowPermission")...

Apparently there is a command line length limitation, after connect with Admin server in wlst, seeing:

wls:/<DOMAIN>/serverConfig> grantPermission(codeBaseURL="file:/<MW_HOME>/oracle_common/modules/org.springframework_2.5.jar",permClass="oracle.security.jps.service.policystore.PolicyStoreAccessPermission",permTarget="context=APPLICATION,name=<APPLICATION_NAME>",permActions="getApplicationPolicy")

Unable to complete the script

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.