Hi Eranda,

Looks like GovernanceListUI is doing a BE call when a user logs in without
checking his permission. In order to call operations in the GovernanceList
the user needs a /permission/admin/manage/
resources/govern/metadata/list premission.

So make sure before calling that method the user has the permission. You
have to look for an implementation of UIAuthenticationExtender interface
inside GovernanceListUI and do a permission check inside it before doing
the BE call.

CarobnUIUtil.isUserAuthorized

thanks,
dimuthu


On Tue, Jan 17, 2012 at 11:16 AM, Eranda Sooriyabandara <[email protected]>wrote:

> Hi Dimuthu,
> in component.xml  /permission/admin/manage/resources/govern/metadata/list
> in services.xml /permission/admin/manage/resources/govern/metadata/list
>
> thanks
> Eranda
>



-- 
Dimuthu Leelarathne
Technical Lead

WSO2, Inc. (http://wso2.com)
email: [email protected]

Lean . Enterprise . Middleware
_______________________________________________
Carbon-dev mailing list
[email protected]
http://mail.wso2.org/cgi-bin/mailman/listinfo/carbon-dev

Reply via email to