Now, I have defined in jetspeed-portlet.xml the js:security-constraint-ref and the definition of this contraint in page.security.

  <portlet>
    <portlet-name>MyPortlet</portlet-name>
    <js:security-constraint-ref>ROLE_X</js:security-constraint-ref>
  </portlet>

 <security-constraints-def name="ROLE_X">
    <security-constraint>
      <roles>ROLE_X</roles>
      <permissions>view,edit</permissions>
    </security-constraint>
  </security-constraints-def>

The portlet selector and the ajaxapi check the constraint and the portlet can't not be select. But If I have the portlet on a page and set the security contraint after this, the portlets can be used normal.

How can I check the security contraint in my portlet?


kind regards,

Frank

Frank Otto schrieb:
Hi,

I want to define the needed roles for a portlet. The portlets should not be show, if the user has not the defined role for this portlet.

How can I do this?


kind regards,

Frank


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscr...@portals.apache.org
For additional commands, e-mail: jetspeed-user-h...@portals.apache.org




---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscr...@portals.apache.org
For additional commands, e-mail: jetspeed-user-h...@portals.apache.org

Reply via email to