[jboss-user] [JBoss Portal] - Re: Page security not working in 2.6.2GA?
PeterJ wrote : nollie, your assumption is correct: you have to remove view/view recursive from the portal and set it for every page or portlet instance. | Thanks for your response Peter - that was driving me nuts. I have to say though, that this is the answer I didn't want to hear. The portal I'm working on has over a hundred pages and I'm only interested in securing 2 or 3. Given this permission granting scheme I have to add markup to 100 pages (and all future pages) so that I can hide my admin tools. The security scheme would be fine if one could override at any node. I could have a public portal, allow most of my pages to inherit that, and then put markup on 3 pages to check for the Admin role. Nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4111324#4111324 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4111324 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Page security not working in 2.6.2GA?
This make managing the page security very difficult if this is true. The portal pages are a tree and each node in the tree should be able to declare the security for itself and it's subtree overriding inherited attributes if desired. For example the tree below | A | /\ | B C | /\ |D E | If node A is unrestricted and view/view recursive then nodes B C should be visible by default to all. However, node C should be able to override inherited attributes and change security to be restricted for itself and it's subtree. Node C should also be able to terminate recursion of inherited attributes. Tom View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4110367#4110367 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4110367 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Page security not working in 2.6.2GA?
Yes. The parent of the Weather page is the portal itself. The portal has given Role Unchecked view and viewrecursive permissions so that unauthenticated users can navigate the portal - all pages inherit those security settings so I don't have to set them again and again. What I want to do is restrict access to the Weather page so that only admins can see it. Surely this is possible, right? Your answer seems to imply that I would have to remove view/view recursive from the portal and instead set that for every page other than the weather page? I appreciate your help in understanding this. nollie View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4109431#4109431 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4109431 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Page security not working in 2.6.2GA?
nollie, your assumption is correct: you have to remove view/view recursive from the portal and set it for every page or portlet instance. For other threads on this topic, see http://www.jboss.com/index.html?module=bbop=viewtopict=98753 and http://www.jboss.com/index.html?module=bbop=viewtopict=115712 View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4109459#4109459 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4109459 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
[jboss-user] [JBoss Portal] - Re: Page security not working in 2.6.2GA?
There are several threads on the subject. Security is additive. you have a parent object with has view-recursive right. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=4109096#4109096 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=4109096 ___ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user
