Access Web Application resources

Before you begin

This subtask is part of the main task for creating a new scoped security role. Start with the main task: Create scoped security roles

Note: If you loaded security roles for the Web application from deployment descriptors using the Deployment Assistant, you need to Activate Changes and start the application in order to access the roles.

A scoped role for a Web Application resource applies either to the entire Web application and its contents or to individual resources contained in the Web application, such as JSPs and JARs.

The way you access scoped roles differs slightly depending on how your Web application is deployed. Start with step1 or step 2:

If the Web Application is deployed within an enterprise application (EAR):
1. In the left panel, expand Deployments and select the Web application module, for example:
  Deployments > MyEAR > Modules > MyWebAppModule
2. On the Settings page for the selected resource, select Security > URL Patterns > Roles to display the URL Patterns and Roles page.
If the Web Application is a stand-alone deployment:
1. In the left panel, expand Deployments and select the Web application, for example:
  Deployments > MyWebAppModule
2. Specify the level where you want to apply the security role:
  To apply a security role to the entire Web application and its contents: select Security > Application Scope > Roles and return to the main task: Start at
  Create scoped security roles: step 2
  To apply a security role to a resource within the application: select Security > URL Patterns > Roles to display the URL Patterns and Roles page.
Click New to display the Create New Role page.
In the URL Pattern field enter a string that represents the path to the Web application resource:
- To secure a resource within the application, enter the path to the resource, for example: /MyServlet.jsp
- To secure the entire contents of a Web application contained in an EAR, enter a single slash: /
Caution: In WebLogic Server version 8.x the two characters / * were used by the security container to indicate the entire Web application contents. Starting with the current version, BEA recommends that you use the / character, as it is the standard J2EE syntax used by the Servlet container. If you want to continue using /* you need to disable the EnforceStrictURLPattern field. For more information, see Reset the EnforceStrictURLPattern flag
Return to the main task. Start at Create scoped security roles: step 3