Technical data

Permissions for Starting and Shutting Down a WebLogic Server
Configuring and Managing WebLogic Server 8-9
! Shutting Down a WebLogic Server
Permissions for Using the weblogic.Server Command
The weblogic.Server command, which starts a WebLogic Server from a local host
machine, calls methods that are protected by a policy on the server resource. To use
this command, you must satisfy the requirements of the policy on the server.
Some
weblogic.Server arguments set attributes for MBeans. However, because
these arguments modify an MBean before the server is in the
RUNNING state, the policy
on the server resource, not the MBean security scheme, is the authorizer. For example,
a user in the Operator role can use the
-Dweblogic.ListenPort argument to change
a server’s default listen port, but once the WebLogic Server is running, the Operator
user cannot change the listen port value.
For more information about
weblogic.Server, refer to "Starting in Development
Mode or Production Mode" in the Administration Console Online Help.
Permissions for Using the Node Manager
The Node Manager uses both MBeans and the server resource to start a remote server.
If you have configured a Node Manager on the host machine of a remote WebLogic
Server, by default a user in the Admin or Operator role can use the Node Manager to
start the remote server.
You must make sure that any modifications you make to the default security settings
do not prevent a user from being authorized by both MBean security and the server
policy. For example, if you remove the Operator role from a server policy, the Operator
can still call MBean methods but cannot call the server resource.
For information about the Node Manager, refer to "Managing Server Availability with
Node Manager"intheConfiguring and Managing WebLogic Server guide.