BPM Worklist is Validating Users in Case Sensitive fashion. (Doc ID 2915134.1)

Last updated on APRIL 01, 2024

Applies to:

Symptoms

 BPM Worklist seems that is validating users in Case sensitive fashion to display or hide options in the BPM worklist console.

TEST CASE:
==========
This issue is happening on an environment with Active Directory acting as a LDAP.
This can be reproduced the issue using the default JAZN ldap.
Issue is triggered when exists users in the LDAP in Upper cases and in EM Console is associated the users to Application Roles by typing manually the users by checking the "Check to enter principal name here instead of searching from above. This option can be used for advanced scenarios related to custom authenticators." option.

1. Create an user:
WLS_Console -> base_domain -> Security Realms -> myrealm -> Users and Groups
-> Users

I created one user: HG_TEST3
-> New

Name: HG_TEST3 ==============================> Uppercases
Description: Test
Provider: DefaultAuthenticator
*Password: welcome1
*Confirm Password: welcome1

-> ok

2. In EM Console I added hg_test3 (lowercase) user into the SOAAdmin Role

EM Console -> SOA -> soa-infra(soa_server1) -> Security -> Application Roles

Role Name: Start With -> SOAAdmin -> >

-> Add

Type: User ->

Instead of "search and selected the user" Do

Checked Check to enter principal name here instead of searching from above.
This option can be used for advanced scenarios related to custom authenticators.
Type: User *Principal Name : hg_test3 (I typed the user in lowercases)
Display Name: hg_test3

-> Add

Now it appears
Aministrators Administrators Group
hg_test3 User

-> OK
Later can be seen:

Membership for SOAAdmin
Principal Display Name Type Description
Administrators Administrators Group Administrators can view and modify all
resource attributes and start and stop servers.
hg_test3 HG_TEST3 User Test SR 3-28242970451 <==== It appears in Uppercase the Display name.
-> OK

3. In BPM Worlist I logged in using hg_test3 user

http://xx.xx.xx.xx:xxxx/integration/worklistapp/faces/login.jspx

In the upper corner under hg_test3 It did NOT appear the Administration option

(if user is created in lower case, or if the user is selected by a search when it is associated to the SOAAdmin Role, the Administration option shows up)

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.