Re: ias_admin like user
- From: Li-Shan Cheng <exriscer@xxxxxxxxx>
- To: Adrian <ade.turner@xxxxxxxxx>
- Date: Fri, 3 Feb 2006 19:38:17 +0100
Hi
Thanks for the reply.
I think however that deploying applications not being Administrator should
be a basic functionality. In fact one of the administrators here is shocked
when I told him this is not possible, since he comes from Bea Weblogic
world.
I have read *Oracle(r) Internet Directory Administrator's Guide, 10g Release 2
(10.1.2), Chapter 17 *
and it talks about Delegation of Privileges for Deployment of Oracle
Components<file:///E:/tecnico/oracle/Documents/10gAS_10.1.2_General/idmanage.1012/b14082/priv_del.htm#i1024397>where
says:
- Perform repository database installation that creates a repository
database registration entry in the directory
- Perform mid-tier installation. To associate a mid-tier with a
repository, the user must have the appropriate privileges with a specific
repository database.
- Install and configure Oracle Application Server components that
create application entities in Oracle Internet Directory
- Grant to component entities the runtime privileges listed later in
this section
- Configure provisioning profiles for components so that the
components can receive update notifications
I am not sure if this can be used to delegate dployment privileges?
Cheers
LSC
On 2/3/06, Adrian <ade.turner@xxxxxxxxx> wrote:
>
> Totally agree with Jurijs.
>
> We allow our developers to do something pretty similar, but with a java
> deployer rather than shell scripts - we run AS on win2k3 (not my choice,
> but
> it works and scales okay).
>
> In addition to allowing the developers to deploy EAR files, the java code
> allows them to change any files at container level: j2ee/container/applib
> and j2ee/container/config (running dcmctl updateconfig -ct oc4j after).
>
> We don't allow any changes which might affect another project coexisting
> in
> a different container in the same application server on production, and
> this
> way if they mess it up their development container you just have to
> recreate
> it.
>
> I'll add to anyone considering Windows for this that the combination of
> file/directory locking caused by explorer and (un)deployments can be a
> real
> pain, but it can be worked round.
>
> HTH
> Adrian
>
> -----Original Message-----
> From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jurijs Velikanovs
> Sent: 03 February 2006 12:09
> To: exriscer@xxxxxxxxx
> Cc: oracle-l@xxxxxxxxxxxxx
> Subject: Re: ias_admin like user
>
> Hi Li,
>
> Unfortunately there is no such luxury so far in Oracle AS 10G R2 (at
> least I am not aware about that, have worked a bit with AS).
> For development purposes we have written some shell scripts to peek up
> EAR files from particular directory and install those using the dcmctl
> utility in batch mode.
> Developers have got dedicated Unix account to copy deliveries in
> particular directory.
>
> It is not good idea I believe to give Developers power to changing
> parameters. It is some think you would like to have control on. We
> have installed AS under separate Unix user and give that user (and
> ias_admin credentials) to developers (making a full installation
> backup, before that). It is some think like pre development
> environment for where Developers free to do anything (changing
> parameters, deploying, undeploying, rm -rf etc ;). After they broke it
> we restoring that environment from the backup ;)
>
> Hope this helps,
> Jurijs
>
> On 2/3/06, Li-Shan Cheng <exriscer@xxxxxxxxx> wrote:
> > Hi
> >
> > I have installed Oracle AS 10gR2 for our development environment. I was
> > wondering how to create more administrative users such as ias_admin? The
> > developers want privileges to deploy J2EE/Forms/Reports/Discoverer
> > applications and modify some parameters. I have always done this using
> > ias_admin in the past but I wouldnt like to give them ias_admin user and
> > password, is there anyway create ias_admin like users ?
> >
> > Cheers
> >
> >
> >
> > LSC
> >
> >
>
>
> --
> Jurijs
> +44 7738 013090 (GMT)
> ============================================
> http://otn.oracle.com/ocm/jvelikanovs.html
> --
> //www.freelists.org/webpage/oracle-l
>
>
>
Other related posts:
