This is a know problem. If any role has a permission, then the user has the permission.
The "registry based security" recently added to the CVS resolves this problem. See the proposal for documentation. http://cvs.apache.org/viewcvs.cgi/jakarta-jetspeed/proposals/Security.txt?rev=HEAD&content-type=text/vnd.viewcvs-markup I committed a patch that enables <security-ref ...> on psml entry. Paul Spencer Wimmer, Matthias wrote: > Hi all, > > it definitely works the way Scott described. I tried it out by removing the > close permission from the administrator's role. After having logged out and > logged in again a few portlets didn't show the close button any more. > > The strange point is that at some portlets the close button disappeared and > at some other portlets it is still visible. In my opinion this depends on > the security role that is assigned to a portlet. This assignment looks like > this in the portlet registry: > > <security role="user" /> > > If you have a look at the portlet registry, you will notice that only the > portlets that are assigned a security role at all don't show the close > button any more. > > > Maybe you might want to add a security role to all of your portlets. After > that you can easily handle this close button feature by using this close > permission. > > If this works, kindly send a response. > > > Good Luck > > Matthias Wimmer > > > > > > > > >>-----Original Message----- >>From: Weaver, Scott [mailto:[EMAIL PROTECTED]] >>Sent: Friday, July 05, 2002 9:27 AM >>To: 'Jetspeed Users List' >>Subject: RE: How can I remove the "close"- Button in a Portlet ? >> >> >>Hi Frederic, >> >>I think this can be achieved by removing the "close" >>permission from any of >>the roles you do not want closing portlets. This is a >>theory, so I am not >>positive on this. >> >>Scott >> >> >>>-----Original Message----- >>>From: Frederic Hahn [mailto:[EMAIL PROTECTED]] >>>Sent: Friday, July 05, 2002 7:11 AM >>>To: [EMAIL PROTECTED] >>>Subject: How can I remove the "close"- Button in a Portlet ? >>> >>>Hi guys, >>> >>>I am trying to remove the "close" (X) button from a >>> >>portlet. I dont want >> >>>the >>>user to be able to remove a portlet. Is this possible and >>> >>where can I do >> >>>it? >>> >>>Could this even be done dependant on the user profile? >>> >>>Thanks for your answers, >>> >>>Frederic >>> >>> >>> >>>-- >>>To unsubscribe, e-mail: <mailto:jetspeed-user- >>>[EMAIL PROTECTED]> >>>For additional commands, e-mail: <mailto:jetspeed-user- >>>[EMAIL PROTECTED]> >>> > > -- > To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> > For additional commands, e-mail: <mailto:[EMAIL PROTECTED]> > > -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
