Securing AquaLogic Service Bus in a Production Environment

To prepare an AquaLogic Service Bus installation for production, you must pay special attention to your security needs. The following list outlines some of the tasks you need to perform:

Read and follow the guidelines in Securing a Production Environment in the WebLogic Server documentation.
Create user accounts for the AquaLogic Service Bus administrators and assign them to one or more of the following groups as appropriate: IntegrationAdministrators, IntegrationOperators, IntegrationMonitors, and IntegrationDeployers. For more information, see "Role-Based Access in AquaLogic Service Bus Console" under "Overview of Security Configuration" in Security Configuration in Using the AquaLogic Service Bus Console.
In your file system, configure access control to the directory that contains AquaLogic Service Bus configuration data. This is the sbconfig directory under the domain root. For example:

C:\bea\user_projects\domains\base_domain\sbconfig

In your file system, configure access control to the directories used by the FTP, file, and email transports.
If necessary, configure access control to the JMS resources used by your AquaLogic Service Bus installation.

Security Guide

Securing AquaLogic Service Bus in a Production Environment