taylor      01/09/04 23:07:36

  Modified:    src/java/org/apache/jetspeed/modules/actions/portlets
                        CustomizeAction.java
  Log:
  - modified parameter security check to use JetspeedSecurity interface
  
  Revision  Changes    Path
  1.6       +2 -2      
jakarta-jetspeed/src/java/org/apache/jetspeed/modules/actions/portlets/CustomizeAction.java
  
  Index: CustomizeAction.java
  ===================================================================
  RCS file: 
/home/cvs/jakarta-jetspeed/src/java/org/apache/jetspeed/modules/actions/portlets/CustomizeAction.java,v
  retrieving revision 1.5
  retrieving revision 1.6
  diff -u -r1.5 -r1.6
  --- CustomizeAction.java      2001/09/05 05:57:48     1.5
  +++ CustomizeAction.java      2001/09/05 06:07:36     1.6
  @@ -64,6 +64,7 @@
   import org.apache.jetspeed.services.rundata.JetspeedRunData;
   import org.apache.jetspeed.om.registry.PortletEntry;
   import org.apache.jetspeed.om.registry.Parameter;
  +import org.apache.jetspeed.services.JetspeedSecurity;
   
   // Turbine stuff
   import org.apache.turbine.util.Log;
  @@ -118,8 +119,7 @@
               if (  (!param.isHidden()) && (name.charAt(0)!='_') )
               {
                   // check the user role
  -                String role = 
(param.getSecurity()!=null)?param.getSecurity().getRole():null;
  -                if ((role==null)||(rundata.getACL().hasRole(role)))
  +                if (JetspeedSecurity.checkPermission(rundata, 
JetspeedSecurity.PERMISSION_CUSTOMIZE, param))
                   {
                       params.add(entry.getParameter(name));
                   }
  
  
  

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to