The
system-jazn-data.xml is an XML file which is configured by the user to use as an ID store and/or policy store. The file is located in $DOMAIN_HOME/config/fmwconfig.
Sample
system-jazn-data.xml file:<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<jazn-data>
<jazn-realm>
<realm>
<name>jazn.com</name>
<users>
<user>
<name>weblogic</name>
<guid>23AAB190021911DDBF86C74F01C202FB</guid>
<credentials>PN0Qr+/dpDRV+jSWP378EdjxWDS0PuAs=</credentials>
</user>
</users>
</realm>
</jazn-realm>
<policy-store>
<applications>
<application>
<name>reports</name>
<app-roles>
<app-role>
<name>rw_administrator</name>
<display-name>Reports Administrator</display-name>
<class>oracle.security.jps.service.policystore.ApplicationRole</class>
<members>
<member>
<class>oracle.security.jps.internal.core.principals.JpsXmlUserImpl</class>
<name>weblogic</name>
</member>
<member>
<class> weblogic.security.principal.WLSUserImpl </class>
<name>weblogic</name>
</member>
</members>
</app-role>
<app-role>
<name>rw_operator</name>
<display-name>Reports Operator</display-name>
<class>oracle.security.jps.service.policystore.ApplicationRole</class>
</app-role>
<app-role>
<name>rw_monitor</name>
<display-name>Reports Monitor</display-name>
<class>oracle.security.jps.service.policystore.ApplicationRole</class>
</app-role>
</app-roles>
<jazn-policy>
<grant>
<grantee>
<principals>
<principal>
<class>oracle.security.jps.service.policystore.ApplicationRole</class>
<name>rw_administrator</name>
</principal>
</principals>
</grantee>
<permissions>
<permission>
<class>oracle.reports.server.ReportsPermission</class>
<name>report=* server=* destype=* desformat=* allowcustomargs=true</name>
<actions>*</actions>
</permission>
<permission>
<class>oracle.reports.server.WebCommandPermission</class>
<name>webcommands=* server=*</name>
<actions>execute</actions>
</permission>
</permissions>
</grant>
<grant>
<grantee>
<principals>
<principal>
<class>oracle.security.jps.service.policystore.ApplicationRole</class>
<name>RW_BASIC_USER</name>
</principal>
</principals>
</grantee>
<permissions>
<permission>
<class>oracle.reports.server.ReportsPermission</class>
<name>report=test.rdf server=* destype=* desformat=* allowcustomargs=true</name>
<actions>*</actions>
</permission>
<permission>
<class>oracle.reports.server.WebCommandPermission</class>
<name>webcommands=showmyjobs,getjobid,showjobid server=*</name>
<actions>execute</actions>
</permission>
</permissions>
</grant>
</jazn-policy>
</application>
</applications>
</policy-store>
