Brad,

Assigning security to a portlet in the registry where the security entry looks 
something like this:

<security-entry name="limited-access">
 <meta-info>
  <title>Limited User Access</title>
  <description>Limits users to minimize, maximize and view.</description>
 </meta-info>
 <access action="*">
  <allow-if role="admin />
 </access>
 <access action="view">
  <allow-if role="user" />
 </access>
 <access action="minimize">
  <allow-if role="user" />
 </access>
 <access action="maxmize">
  <allow-if role="user" />
 </access>
</security-entry>

Example of a portlet using the previously defined security:

<portlet-entry name="MySecurePorlet" hidden="false" type="instance" 
application="false">
 <security-ref parent="limited-access "/>
  <classname>my.portlet.Class</classname>
  <url cachedOnURL="true"/>
</portlet-entry>

Anyone with the admin role can perform all actions on a portlet using this security 
entry, however, anyone with the user role can only minimize, maximize and view the 
portlet.

You will have to assign this entry to each one of the portlets you want to secure in 
this fashion or you can assign it to the parent(s) of those portlets and inherit the 
security.

hth,
-scott


> -----Original Message-----
> From: Brad Davis [mailto:[EMAIL PROTECTED]
> Sent: Sunday, March 23, 2003 4:00 PM
> To: [EMAIL PROTECTED]
> Subject: Removing action buttons
> 
> Ok, so I have tried everything ever mentioned in order to remove an action
> button... someone said rss.xsl, another said add a security constraint, I
> must be doing something wrong cause nothing works.
> 
> Can someone tell me the steps, from a default installation of Jetspeed
> (latest version), how to remove the close button from a portlet (like the
> HelloWorld portlet)? We don't want users to have the abilitity to close a
> portlet, but we would like them to be able to maximize, minimize, etc.
> 
> I would be extremely appreciative if someone can shed some light on how to
> do this. Thanks!!! -Brad

Reply via email to