WLS 7.0 SP1 - Remove the restriction on number of operands in a role expression - CR090738 (Doc ID 771894.1)

Last updated on NOVEMBER 05, 2016

Applies to:

Oracle Weblogic Server / WebLogic Server / 7.0.x
Information in this document applies to any platform

Goal

DESCRIPTION:
The entitlement engine restricts the number of operands in a role expression to 100 per the below line in
weblogic/entitlement/parser/Parser.java

EExprRep[] operands = new EExprRep[100];

This restriction in-turn limits various attribute values. For example, the maximum number of <principal-name>
elements that can be mapped to a <role> within <security-role-assignment> within weblogic-ejb-jar.xml gets
limited to 50.  Having more than 50 elements results in weblogic.entitlement.data.EnCreateException during the
deployment of an application. 

CONFIGURATION:
WebLogic Server 7.0 with Service Pack 1

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms