8 Configuring Oracle GoldenGate Veridata Security

8.1 Oracle GoldenGate Veridata Security Overview

When using Oracle GoldenGate Veridata, you will be selecting, viewing and storing data values from the tables or files of your business applications. Care must be taken to protect access to the following components:

• The files, programs, and directories in the Oracle GoldenGate Veridata installation directories

• Data files that contain the results of data comparisons

• The Oracle GoldenGate Veridata Web User Interface, where data values can be viewed

8.2 Securing the Oracle GoldenGate Veridata Files

This section describes how to secure you business data and control access to the Oracle GoldenGate Veridata installation directories and user interface.

8.3 Securing access to Oracle GoldenGate Veridata Web

You can assign security roles to the users of Oracle GoldenGate Veridata to control their access to the functions that are performed by the software, some of which expose selected data values from the database. These roles are:

• Administrator: The administrator role is the highest-level security role in Oracle GoldenGate Veridata. This role can perform all of the functions that configure, execute, and monitor Oracle GoldenGate Veridata.

• PowerUser: The power user role is the second-highest role in Oracle GoldenGate Veridata. This role can perform all of the functions that configure, execute, and monitor Oracle GoldenGate Veridata from the Oracle GoldenGate Veridata Web User Interface, but this role cannot perform any configuration functions for the Oracle GoldenGate Veridata Server.

• ReportViewer: The report viewer role cannot perform functions that configure Oracle GoldenGate Veridata or execute jobs. This role can only view configuration and job information, and view comparison reports.

• DetailReportViewer: The detail report viewer role cannot perform any functions that configure Oracle GoldenGate Veridata or execute jobs. This role can only view configuration and job information, and view comparison reports and out-of-sync report information through the Oracle GoldenGate Veridata Web User Interface or at the file level.

Security is controlled through the Administration Tool of the Apache Tomcat Web Server. From this interface, a user with the administrator role can:

• Create a user and assign it a security role.

• Create user groups and assign them security roles. Users can be added to these groups without being given a security role. A user inherits the role of its group.

• Create a user and assign it a security role, and then add that user to a group. The user inherits the role of its group and keeps its individual role.

To open the Apache Tomcat Web Server Administration Tool

1. Connect to the Apache Tomcat Web Server from a browser by typing the following address:

   http://hostname:port/admin
   

   Where:

   hostname is the name or IP address of the system where the Oracle GoldenGate Veridata server and web components are hosted, and port is the port number assigned to Oracle GoldenGate Veridata Server (default is 8830).

2. Log on to the Apache Tomcat Web Server Administration Tool as an Oracle GoldenGate Veridata administrator user. A default administrator user was created during the installation of Oracle GoldenGate Veridata.

3. In the navigation pane, click to expand User Definition. From this node, all user resources are managed.

To create a group

1. Under User Definition, click Groups. Existing groups are displayed and can be edited by clicking their names.

2. From the Group Actions list, select Create New Group.

3. Under Group Properties, type a name for the group (no spaces, case sensitive) in the Group Name box and (optional) a description in the Description box.

4. Under Role Name, select the check box next to the role you want to assign to the group. You can select any role that is listed in Section 8.3, "Securing access to Oracle GoldenGate Veridata Web".

5. Click Save to save the group.

6. When finished using the Apache Tomcat Web Server Administration Tool, click Commit Changes to save the changes to the repository. To make any more changes after you commit the changes, you must log in again.

To create or edit a user

1. Under User Definition, click Users.

2. To edit a user, click its name. To add a new user, select Create New User from the User Actions list.

3. Under User Properties, type:

   • User Name: A name for the user (no spaces, case-sensitive)

   • Password: A password for the user (no spaces, case-sensitive).

   • Full Name: (Optional) the name of the person who is this user.

4. To assign the user to a group, click the check box next to the name of the group under Group Name. Linking a user to a group is optional. The user inherits the default role of the group.

5. To assign a role to this user, click the check box next to the name of the role under Role Name. You can select any role that is listed in Section 8.3, "Securing access to Oracle GoldenGate Veridata Web."

6. Click Save to save the user.

7. When finished using the Apache Tomcat Web Server Administration Tool, click Commit Changes to save the changes to the repository. To make any more changes after you commit the changes, you must log in again.

8.4 Maintaining Passwords

You can change the passwords that allow users access to the Veridata Web User Interface and those that access the repository.