taylor      02/04/16 10:22:12

  Modified:    src/java/org/apache/jetspeed/services/profiler
                        JetspeedProfilerService.java
  Log:
  restricted access to role psml if not logged on
  this feature will be enhanced with security roles checks
  
  Revision  Changes    Path
  1.27      +5 -2      
jakarta-jetspeed/src/java/org/apache/jetspeed/services/profiler/JetspeedProfilerService.java
  
  Index: JetspeedProfilerService.java
  ===================================================================
  RCS file: 
/home/cvs/jakarta-jetspeed/src/java/org/apache/jetspeed/services/profiler/JetspeedProfilerService.java,v
  retrieving revision 1.26
  retrieving revision 1.27
  diff -u -r1.26 -r1.27
  --- JetspeedProfilerService.java      11 Apr 2002 20:48:53 -0000      1.26
  +++ JetspeedProfilerService.java      16 Apr 2002 17:22:12 -0000      1.27
  @@ -133,7 +133,7 @@
    *
    * @author <a href="mailto:[EMAIL PROTECTED]";>David Sean Taylor</a>
    * @author <a href="mailto:[EMAIL PROTECTED]";>Santiago Gala</a>
  - * @version $Id: JetspeedProfilerService.java,v 1.26 2002/04/11 20:48:53 taylor Exp 
$
  + * @version $Id: JetspeedProfilerService.java,v 1.27 2002/04/16 17:22:12 taylor Exp 
$
    */
   
   public class JetspeedProfilerService  extends TurbineBaseService
  @@ -341,7 +341,10 @@
                   if (null != param) 
                   { 
                       // ROLE Resource
  -                    profile.setRole( JetspeedSecurity.getRole(param) );
  +                    if (user.hasLoggedIn())  // disallow role access for anonymous 
user
  +                    {                        // this feature could be enhanced when 
anon user is added to db
  +                        profile.setRole( JetspeedSecurity.getRole(param) );
  +                    }
                   }
                   else  // it must be a user resource or anonymous resource
                   {
  
  
  

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to