Tuesday, December 8, 2009

Solving Error 403--Forbidden in ADF Security

While developing new prototype application, it happened to me to get Error 403--Forbidden, while trying to login into application protected by ADF Security:



Error itself is logical, but in my case I was providing correct username/password, security permissions were defined correctly as well. I did a bit of research and found that weblogic.xml file was generated incorrectly. This file is accessible through JDeveloper 11g Application Navigator:



I saw that weblogic.xml was generated without required entries:



So, I added required security role assignment manually:



Now my application opens correctly:



If you will encounter same problem, make sure your weblogic.xml file is valid. Download working sample application - ADFSecurityValidUsers.zip.

4 comments:

Vikram Kohli said...

Hi Andrejus,

Getting same error when using form based authentication.

In my web.xml I have now following entries after changing the login authentocation method from


adfAuthentication
oracle.adf.share.security.authentication.AuthenticationServlet

success_url
/faces/main.jspx

1



FORM

/login.html
/error.html



And when I login, , I get 403 forbidden error.Can you plz provide help to solve this.

Using Jdev 11.1.1.2.

Vikram Kohli said...

Hi Andrejus,

Might be last comment was not clear, But I am facing this error from long time. When I change my authentication method from HTTP BAISC to FORM based authentication(and provide default login and error pages), I get the same error 403 forbidden.

Vikram

Anonymous said...

Hi Andrejus,

I get the same error but my case is a lot different.

I created a simple(No Security enabled) jspx page in JDeveloper 11g and it works really perfect on pc browsers.I get that error whenever I want to load that page on my mobile emulator browser!!! It doesn't work even on real mobile browsers like iphone Safari.

Any suggestions?

Thanks,
Shahab

HongMing said...

Hi Andrejus

I want to embed JavaScript into ADF Mobile Browser (Trinidad environment) like af:resource method. However, I can't find a proper way doing this. Would you mind to help me on this?

Thanks