This was a problem in JBoss Portal 2.0 and persists in JBoss Portal 2.2.

More specifically in the class PortletRequestImpl

   public boolean isUserInRole(String roleName)
  |    {
  |       // Get the map role name to role link
  |       Map securityRoleRefsMap = 
((PortletContainer)creq.getComponent()).getSecurityRoleRefsMap();
  | 
  |       // Process the role link
  |       String roleLink = (String)securityRoleRefsMap.get(roleName);
  |       if (roleLink == null)
  |       {
  |          if (securityRoleRefsMap.containsKey(roleName))
  |          {
  |             // The role name exist without a role link value
  |             return securityContext.isUserInRole(roleName);
  |          }
  |          else
  |          {
  |             // No role name is defined
  |             return false;
  |          }
  |     }
  |       else
  |       {
  |          // We have the role link value
  |          return securityContext.isUserInRole(roleLink);
  |       }
  |    }
  | 

note that if the role is not in "securityRoleRefsMap" the method return false.

View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3936945#3936945

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3936945


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
JBoss-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to