Jetspeed will refresh any xreg files; You can define a security-entry with the allowed 
roles in an xreg, change that xreg, and wait for Jetspeed to reload it. e.g.

    <security-entry name="UserManager-only">
        <meta-info>
            <title>UserManager-only</title>
            <description>Full access to user with the UserAdmin role.</description>
        </meta-info>
        <access action="*">
            <allow-if role="UserManagerAdmin"
                xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; 
xsi:type="java:org.apache.jetspeed.om.registry.base.BaseSecurityAllow"/>
        </access>
    </security-entry>

    <portlet-entry name="UserSearch" hidden="false" type="ref"
        parent="CustomizerVelocity" application="false">
        <security-ref parent="UserManager-only"/>
         ...
    </portlet-entry>

You used to be able to do
        <security role="UserManagerAdmin"/>
in a portlet-entry, but I believe that's been depreciated.

I don't know if there is a way to do this programatically.

>>> [EMAIL PROTECTED] 02/13/03 01:22PM >>>

How do I change the roles required to access a portlet without restarting
the app server?

I would like to be able to add/remove roles for a portlet without having to
restart tomcat. Are there any API's for this functionality?

Chris


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to