SOA Folders Are Still Seen For A Restricted User (Doc ID 3023948.1)

Last updated on MAY 27, 2024

Applies to:

Symptoms

 1. Created a user named “laxmi” in which to assign folder roles:
a. In the Navigator, select WebLogic Domain > soainfra.
b. From the WebLogic Domain menu, select Security > Users and Groups.
c. In the Users tab, click the Create icon to create a user.
d. Create the user name and password, and click OK.
And folder-specific users only require the Monitor role and hence assigned “laxmi” user, “Monitor” role.
2. Log in to Oracle Enterprise Manager Fusion Middleware Control with “weblogic” user as this has Oracle WebLogic Server Admin role.
3. Created new folder named : “consoleTests” folder.
4. Then:
a. Expand SOA > soa-infra.
b. Right-click soa-infra (server_name).
c. Select Security > Application Role
d. Click the Search application roles icon.
e. Select the folder role to which to map to the user laxmi, and click Edit.
For this example, the ApplicationOperator role in the folder "consoleTests" is selected.
The Edit Application Role Click Add.
The Add Principal dialog is displayed.
From the Type list, select User : laxmi.
This adds the selected user i.e laxmi to the folder role ApplicationOperator for the folder consoleTests.

5. Log out of Oracle Enterprise Manager Fusion Middleware Control and log in to Oracle Enterprise Manager Fusion Middleware Control as the “laxmi” user you assigned to the folder role.

And you will find that few other folders including "consoleTests" folder are visible to this user which should not be the case.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.