I am trying to automate the following steps i do through WLS Console :
a. In the Weblogic console's Home page, click on Deployments link form left, find "gateway-management-service"
b. Expand, "gateway-management-service" and click on "GatewayManagementService" ( this is a webservice module )
c. Click on Security tab then the Roles tab.
d. Click "New" in "Web Service Module Scoped Roles" section.
e. In the new windows, set the name as "Special WS Role Enforcement" and click OK.
f. click on the link "Special WS Role Enforcement".
g. In the new page, Click on "Add Conditions" and select "User" in the new page and click Next.
h. In the new page, enter "CSR.gatewaywsuser" in the "User Argument Name", then click "ADD"
i. Click on Finish.
j. Save.
i have test.py as:
connect('weblogic', 'welcome123', 'localhost:7001');
realm=cmo.getSecurityConfiguration().getDefaultRealm();
xacmlatz = realm.lookupAuthorizer('XACMLAuthorizer');
xacmlrm = realm.lookupRoleMapper('XACMLRoleMapper');
resourceId = 'type=<webservices>, application=gateway-management-service, contextPath=gwy_management_service, webService=GatewayOidManagerService'
xacmlatz.createPolicy(resourceId, "Rol(Special WS Role Enforcement )");
xacmlrm.createRole(resourceId, "Special WS Role Enforcement ", "Usr(CSR.obigatewaywsuser )")
I run this script like :
$MW_HOME/oracle_common/common/bin/wlst.sh test.py
My problem : after executing the above script, when i go to Console -> Deployments -> gateway-management-service -> GatewayManagementService -> Security Tab -> Roles subtab, i don't see the Role. If try to run the script again it will fail with an weblogic.management.utils.AlreadyExistsException: [Security:090320]Failed to create role
What am i doing wrong?
I have tried bouncing both my managed and Admin server after running the test.py to see if that helps, but no success.
You might actually be doing everything correctly. We have the same problem (roles not being displayed in console when set from wlst script). I think it is a Weblogic bug.
That said, you still have a method to verify the role has been set correctly.
In the Weblogic console go to:
Security Realms -> myrealm -> Migration -> Export
And export to a directory of your choice. You can then open XACMLAuthorizer.dat and XACMLRoleMapper.dat and see if your role exists. You'll want to open it with an xml editor or browser as it's hard to read.
Related
I'm trying to create my first project in google cloud with organization's administrator account. I have access to the administrator's email and passwords and I am logging in with that account to do so. The problem is that when I click on create new project I receive the following error:
There was an error while loading /home/dashboard?project=proven-now-305315&authuser=1.
You are missing at least one of the following required permissions:
Project
resourcemanager.projects.get
Check that the project ID is valid and you have permissions to access it. Learn more
Send feedback
The detail is that in my resource administration panel I already gave the permission that they ask me to the resource as shown in the following image:
As I have read, the project IAM Admin role should grant the resourcemanager.projects.get role and as you can see in the image the resource rcv # .. which is the administrator has it activated, however I keep trying to create a new project and it doesn't allow me to do it. Any idea?
In case anybody else, like me, reaches this answer, I want to point out that the accepted answer is correct, but for me I had to also make sure that within the settings, I ensured that Project Creation Settings on the right pane and under the section of Cloud Resource Manager Api Settings was set to on. It was turned off by default. Many people on my team overlooked this as it is significantly smaller text.
This may be an option that was not present before or it was turned on by default in the past. For us, it was turned off.
Please refer to the included image for a visual representation of the
settings that need to be turned on.
The problem was for some reason the Google Cloud was disable for all users, I solved following this instructions. Solved with this!
To activate this service, please follow the steps:
Access the admin console and go to Apps -> Additional Google Services
Look for the service “Google Cloud Platform” and click on the box next to it
In to top right corner click in “ON”
Confirm you want to turn it on in the pop-up box.
I've spent more than an hour on the GCP console and cannot figure out how to create an agent. I created a project, a service account, enabled the dialogflow sdk. I even started my free trial just in case billing was required. I'm only interested in testing capabilities with the standard edition.
The quick start guide says to "Click Create Agent in the left sidebar menu". I do not have that option. My left hand menu under Dialogflow API has: Overview, Metrics, Quotas, Credentials. Can anyone provide the navigation path to actually using dialogflow via the console?
Login via your gmail account https://dialogflow.cloud.google.com/#/login
Create an agent
The steps in this guide make assumptions about your agent, so it's best to start with a new agent. You should delete any existing agent for your project before creating a new one. To delete an existing agent:
Go to the Dialogflow Console.
If requested, sign in to the Dialogflow Console. See Dialogflow console overview for more information.
Select the agent you wish to delete.
Click the settings button next to the agent's name.
Scroll down to the bottom of the General settings tab.
Click Delete this agent.
Enter DELETE in the text field.
Click Delete.
To create an agent:
Go to the Dialogflow Console.
If requested, sign in to the Dialogflow Console. See Dialogflow console overview for more information.
Click Create Agent in the left sidebar menu. (If you already have other agents, click the agent name, scroll to the bottom and click Create new agent.)
Enter your agent's name, default language, and default time zone.
If you have already created a project, enter that project. If you want to allow the Dialogflow Console to create the project, select Create a new Google project.
Click the Create button.
I am working on a screen recording app using C++ in XCode. The problem is that when I compile and start the app I always have to give permission for screen recording in "Settings > Privacy".
Is there a way to always grant the permission in XCode or sth similar? It is really annoying when developing/testing the app to always manually grant the permission when re-compiling.
Sign your debug builds Luke
In order to grant macOS "Screen Recording" permission for development (or any other permission like microphone or camera access) you must sign your debug builds with your AppleID certificate. This applies for Swift/C++/Objective-C or any other language.
It's easy and free to do:
Simply click at your project
Go to "Signing & Capabilities"
Select "Development" in "Signing Certificate"
Pick your certificate in the "Team" (if you don't have any there will be an "Add Team" button which lets you download a free one after providing your AppleID)
After that your build settings should look like that:
(you may need to go use Product -> Clean Build Folder and rebuild)
If permissions appears revoked...
Also if the system still doesn't give you permissions you need to go to system Settings -> Security & Privacy -> Privacy and under an appropriate category you need to REVOKE the permission and grant it again after rebuild. This will prompt for app quit - do it and run the application again. From now on it will always have permissions.
I am having a very tinted design on the dashboard. I'm trying to delete but I get the message "does not exist, or you do not have permission to access it." . All right, but. How can I not have permission because I am the only user to use the service. I need to delete but I am facing this difficulty.
I am the only user of the service.
No one else uses the platform
Project permissions:
Role:
I faced same issue and finally figured this out. I hope other people can benefit from this.
If your project is under "No Organization", you can simply go to IAM, make sure you are owner, then go to project, delete/shutdown buttons will be enabled, you can delete the project.
However if you have created an organization, even if you are owner/admin of a project, you do not have delete permission. First you need to go to admin settings page and grant yourself "project deleter" role, then you will be able to shutdown/delete a project.
To give yourself "project deleter" role, go to IAM -> settings, Open dropdown at the top where you can select a project, click on all, click on your oganization name. Here you will see your email as "Organization Administrator". Edit this and add "Project Deleter".
Did this help anyone?
Only project owners can shut down the project, so make sure you are logged in as an account with the Project Owner permission before you try to delete the project. You must first disable billing before deleting any project by shutting down the project. If you are as an owner of project make sure that your log in with the right email.
Also, shutting down a project does not delete the project immediately. It only requests deletion of the project. The project owner will receive an email notification that the project has been marked for deletion
To shut down a project using the GCP Console:
1) Open the Setting page (found under IAM & admin) in the Google Cloud Platform Console.
2) Click Select a project.
3) Select a project you wish to delete, and click Open.
4) Click Shut down. Then click DELETE PROJECT. A confirmation screen describing what will happen appears.
5) Now enter the Project ID, then click Shut down.
For more information about shutting down/deleting the project please have a look at these following links with:
https://cloud.google.com/resource-manager/docs/creating-managing-projects#shutting_down_deleting_projects
https://support.google.com/cloud#topic=6158848
Open IAM and check for project permissions. check members and their roles. Check who is the owner of the project. what is your role? If you are the owner under roles and still not able to delete the project, then raise an issue in https://issuetracker.google.com/issues.
Is it possible to rename a Google Cloud Platform project? If so, how?
I don't need to change the project ID or number. But I do want to change the project name (the name used by/for humans to identify a cloud platform project).
Thanks for any tips!
Use the hamburger menu in the top left to switch to the "IAM & Admin" section
Click Settings
Type the new name
Press Save
Reload the page
For those wondering how to change the project ID, the official documentation says:
A project ID cannot be changed after the project is created, so if you are creating a new project, be sure to choose an ID that you'll be comfortable using for the lifetime of the project.
The easiest way it to go via the hamburger menu in the top left > "IAM & Admin" > Settings.
These are the screenshots to the Google Cloud Product Settings
You can change the project name using gcloud projects update command.
First of all, you need to get the associated project ID.
gcloud projects list
Here is the example command.
gcloud projects update your-old-project-id --name="New project name"
For more information please refer this official documentation.
Note: You cannot change the ID of a project's ID or Number,you can only change the Name.
It seems that the Google console menus have changed since #Sphinxxx posted an answer to this question in 2017. (Unless for some reason my Google account is different than others. Please correct me if I'm wrong.)
It is still possible to rename the project, but in order to get to the Settings page, you must first go through the "IAM & admin" menu. Here are the steps I did:
Choose the project name from the menu just to the right of "Google APIs"
Open the navigation menu by clicking on the three bars ("hamburger") just to the left of "Google APIs"
Hover over IAM & admin in order to see that menu
Click on Settings to open the settings page where you can modify the project name
Screen shot of IAM & admin menu
NOTE: it is also possible to directly go to the settings page via the URL using the project id:
- https://console.cloud.google.com/iam-admin/settings?project=your-project-id
Use the hamburger menu in the top left to switch to the "IAM & Admin" section.
Click Settings.
Type the new name.
Press Save.
Reload the page
Go to IAM
Settings
Rename your project
The easiest way to change your project in a few seconds is to:
Click on the three dots on the left of your profile and then on the Project settings. No matter where you are now in the console, this option will be available.
Change your project name and Click SAVE.