Testing a Secured Application

If you start the tester in a web application with ADF authorization enabled, then depending on your security settings you will get an authorization error either on the tester page itself or on the launcher task flow that is used by the tester page. Both errors are shown below

To correctly run the tester without these authorization errors you need to grant the appropriate role to the task flow tester page and the two task flows used by the tester.. To set these grants, you go to the Application > Secure > Resource Grants menu option in JDeveloper. To grant access to the tester web page you set the Resource Type to Web Page and you check the checkbox Show web pages imported from ADF libraries. Then, the tester page should show up in the list as shown below.

You can now select the tester page and click the iconic add button to grant the test-all role to this page.

To grant access to the tester task flows you set the Resource Type to Task Flow and you check the checkbox Show web pages imported from ADF libraries. Then, the tester task flows named tester-tf and launcher-tf should show up in the list as shown below.

You can now select each tester task flow and click the iconic add button to grant the test-all role to this page.

If you successfully granted the tester page and task flows, you should be able to run the tester. The only thing that might happen is that after you logged in successfully, you are redirected to the applications start page as specified in the authenticationFilter entry in web.xml. You can simply change the URL in the browser and type in tftester after the /[context-root]/faces/ and the tester page should show up.