One more question : Is it possible to cumulate an "allow-if-owner" element with one or more "allow-if role=...", meaning "allow if (owner AND role=... OR role=...)" ?
Indeed I want to allow some of my users to customize their portal and not the others, but I also don't want that anybody can see anybody else's psml pages. Greetings and good week end, Pierre > -----Original Message----- > From: Pierre Henry > Sent: vendredi, 14. mars 2003 09:09 > To: Jetspeed Users List > Subject: RE: allow-if-owner > > > Thank you Mark, it's clear now. > > Greerings, > Pierre > > > -----Original Message----- > > From: Mark Orciuch [mailto:[EMAIL PROTECTED] > > Sent: jeudi, 13. mars 2003 17:11 > > To: Jetspeed Users List > > Subject: RE: allow-if-owner > > > > > > > If I understand well, a security entry with an allow-if-owner > > > element (like > > > the owner-only entry shiped with jetspeed distributions) > allows the > > > specified actions to its owner. > > > > > > But who exactly is the owner of a portlet ? > > > > > > > Once portlet can be added to your psml and it carries > > 'allow-if-owner' via > > its registry definition, you become the 'owner' of the > > portlet reference > > contained in your psml only (i.e. if someone else attempts to > > reference it > > directly via its peid, they will be denied access to it). You > > can override > > this by customizing the portlet and setting it security ref > > to something > > else (and if you're not careful, you can lock yourself out of > > accessing this > > portlet - by assigning it something like 'admin-only', for > instance). > > > > Hope this makes sense. > > > > Best regards, > > > > Mark Orciuch - [EMAIL PROTECTED] > > Jakarta Jetspeed - Enterprise Portal in Java > > http://jakarta.apache.org/jetspeed/ > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: > [EMAIL PROTECTED] > > >
