Release 10.1A: OpenEdge Application Server:
Administration

Alphabetical list of configuration instructions

Working with WSA security involves working with the web.xml file and with settings in the ubroker.properties file.

Disabling and enabling security in the web.xml (OpenEdge-Install-Directory/servlets/wsa) file involves commenting and uncommenting security-constraints.

In XML, comments start with the start-comment (<!--) and end with the end-comment (-->) tag.

To comment out an XML security-constraint, place an XML start-comment before the XML element tag that begins the entry and place an XML end-comment after the XML tag that terminates the <security-constraint> element, as in the following example:

<!-- <security-constraint> ... </security-constraint> -->

The web.xml file included with the sample Web service application includes embedded comments with additional information on changes you might need to make.

The configuration instructions are contained in the following sections:

Controlling access to Web services, WSDL, and WSA administration using one JSE security-constraint
Controlling access to Web services, WSDL, and WSA administration using user-authorization role-names
Customizing the default administrator’s permissions and action settings.
Customizing the PSCOper role’s permissions and action settings
Customizing WSA administration roles
Disabling access to all Web services, to all WSDL, or to all WSA administration
Disabling authentication for WSA administration
Disabling the deploying and undeploying of Web services
Disabling WSDL listings
Enabling authentication for Web services
Enabling authentication for WSDL
Enabling multiple user roles to access Web services, WSDL, or WSA administration
Enabling Web services per user and per application