EJPNO1027W error

Security list configuration is not set.

Explanation

Module ''{0}'' references resources that target the following ''{1}'' : {2}. For security reasons, the WAR data source does not serve content until a special configuration is set. This configuration contains a white list that specifies available files and a black list that specifies files that are not available.

User action

Set a whitelist and a blacklist. We can set the lists in two ways.

In a context parameter in the web.xml of the web application

We can define a whitelist, a blacklist, or both by using this method. If you define only one list, whitelists that target specific sets of files are accepted as more secure than similar blacklists.

<web-app>
...
<context-param>
   <param-name>
      com.ibm.portal.resource.whitelist
   </param-name>
   <param-value>.*</param-value>
</context-param>

<context-param>
   <param-name>
      com.ibm.portal.resource.blacklist
   </param-name>
   <param-value>WEB-INF/.*</param-value>
</context-param>
....
</web-app>

In the Resource Environment Provider settings

Each web application defines three custom properties in the WP ConfigService Resource Environment Provider. All three properties are required.

Note: The variable your_key_for_web_app is used during parsing to identify the three properties that belong together for one web application, so we must use a different key for each web application.

Name	Value
com.ibm.portal.resource.your_key_for_web_app.contextroot	The context root under which the WAR file is deployed. We can use the variable '${URI_CONTEXT_PATH}' to avoid a hardcoded reference to the context root because the context root can be changed. The variable '${URI_CONTEXT_PATH}' resolves the correct context root, which by default is '/wps'.Example: Name: com.ibm.portal.resource.my_web_app_1.contextroot Value: ${URI_CONTEXT_PATH}/PA_My_Web_App
com.ibm.portal.resource.your_key_for_web_app.whitelist	A regular expression that defines the resources in the WAR file that can be served by the portal resource data source.Example: Name: ibm.portal.resource.my_web_app_1.whitelist Value: .*
com.ibm.portal.resource.your_key_for_web_app.blacklist	A regular expression that defines the resources in the WAR file that cannot be served by the portal resource data source.Example: Name: com.ibm.portal.resource.my_web_app_1.blacklist Value: WEB-INF/.*

Parent topic: Validation reports