The oeablSecurity.properties file provides a convenient way to configure security properties for PAS for OpenEdge at various levels. The file serves as an interface to the Spring Security framework. Instead of changing Spring bean constructor and property settings across multiple XML files, you can make changes in the oeablSecurity.properties file.

Security levels

To provide greater flexibility and control, the security properties are organized into the following levels:
Level Description
Install directory All available security properties are located in the install directory at $DLC/servers/pasoe/conf. This file secures all PAS for OpenEdge instances.
Instance Each new instance may have a subset of the install directory security properties file located in instance-dir/conf. This file secures all web applications across all deployed ABL applications for an instance. This level may be empty.
ABL App Each deployed ABL Apps has a subset of the install directory security properties file located in instance-dir/ablapps/abl-app-dir/conf. This file secures a single ABL application. This level may be empty.
Web App Each deployed web application has a subset of the install directory security properties file, located in instance-dir/webapps/web-app-dir/WEB-INF. This file secures a single web application.

Resolve property values set at different levels

To resolve the property values, PAS for OpenEdge identifies the value to use in the following order:
  1. If defined at the Web App level, use the Web App value.
  2. If not defined at the Web App level, use the ABL App value.
  3. If not defined at Web App or ABL App levels, use the Instance value.
  4. If not defined at the Web App, ABL App or Instance levels, use the Install directory value.

In summary the lowest level overrides the higher levels. A common configuration error involves attempting to control security at a higher level without realizing that it has been overridden by settings at a lower level.

For more information about oeablSecurity.properties, see the $DLC/servers/pasoe/conf/oeablSecurity.properties.README file located at $DLC/servers/pasoe/conf.