Re: ias_admin like user

Hi

Thanks for the reply.
I think however that deploying applications not being Administrator should be a basic functionality. In fact one of the administrators here is shocked when I told him this is not possible, since he comes from Bea Weblogic world.

I have read *Oracle(r) Internet Directory Administrator's Guide, 10g Release 2 (10.1.2), Chapter 17 *
and it talks about Delegation of Privileges for Deployment of Oracle Components<file:///E:/tecnico/oracle/Documents/10gAS_10.1.2_General/idmanage.1012/b14082/priv_del.htm#i1024397>where says:

• Perform repository database installation that creates a repository database registration entry in the directory
• Perform mid-tier installation. To associate a mid-tier with a repository, the user must have the appropriate privileges with a specific repository database.
• Install and configure Oracle Application Server components that create application entities in Oracle Internet Directory
• Grant to component entities the runtime privileges listed later in this section
• Configure provisioning profiles for components so that the components can receive update notifications

I am not sure if this can be used to delegate dployment privileges?

Cheers

LSC On 2/3/06, Adrian <ade.turner_at_gmail.com> wrote:
>
> Totally agree with Jurijs.
>
> We allow our developers to do something pretty similar, but with a java
> deployer rather than shell scripts - we run AS on win2k3 (not my choice,
> but
> it works and scales okay).
>
> In addition to allowing the developers to deploy EAR files, the java code
> allows them to change any files at container level: j2ee/container/applib
> and j2ee/container/config (running dcmctl updateconfig -ct oc4j after).
>
> We don't allow any changes which might affect another project coexisting
> in
> a different container in the same application server on production, and
> this
> way if they mess it up their development container you just have to
> recreate
> it.
>
> I'll add to anyone considering Windows for this that the combination of
> file/directory locking caused by explorer and (un)deployments can be a
> real
> pain, but it can be worked round.
>
> HTH
> Adrian
>
> -----Original Message-----
> From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org]
> On Behalf Of Jurijs Velikanovs
> Sent: 03 February 2006 12:09
> To: exriscer_at_gmail.com
> Cc: oracle-l_at_freelists.org
> Subject: Re: ias_admin like user
>
> Hi Li,
>
> Unfortunately there is no such luxury so far in Oracle AS 10G R2 (at
> least I am not aware about that, have worked a bit with AS).
> For development purposes we have written some shell scripts to peek up
> EAR files from particular directory and install those using the dcmctl
> utility in batch mode.
> Developers have got dedicated Unix account to copy deliveries in
> particular directory.
>
> It is not good idea I believe to give Developers power to changing
> parameters. It is some think you would like to have control on. We
> have installed AS under separate Unix user and give that user (and
> ias_admin credentials) to developers (making a full installation
> backup, before that). It is some think like pre development
> environment for where Developers free to do anything (changing
> parameters, deploying, undeploying, rm -rf etc ;). After they broke it
> we restoring that environment from the backup ;)
>
> Hope this helps,
> Jurijs
>
> On 2/3/06, Li-Shan Cheng <exriscer_at_gmail.com> wrote:
> > Hi
> >
> > I have installed Oracle AS 10gR2 for our development environment. I was
> > wondering how to create more administrative users such as ias_admin? The
> > developers want privileges to deploy J2EE/Forms/Reports/Discoverer
> > applications and modify some parameters. I have always done this using
> > ias_admin in the past but I wouldnt like to give them ias_admin user and
> > password, is there anyway create ias_admin like users ?
> >
> > Cheers
> >
> >
> >
> > LSC
> >
> >
>
>
> --
> Jurijs
> +44 7738 013090 (GMT)
> ============================================
> http://otn.oracle.com/ocm/jvelikanovs.html
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>

--
http://www.freelists.org/webpage/oracle-l