Author: ate Date: Tue Oct 4 04:10:42 2011 New Revision: 1178678 URL: http://svn.apache.org/viewvc?rev=1178678&view=rev Log: JS2-1263: Hardening j2-admin security by restricting access to hot deployment and portlet metadata features to admin role only Both portlet render time enforcement of admin constraints and related psml level admin constraints (hiding portlets/pages instead of showing 'Access Denied') added See also JS2-1262 for more detail concerning individual portlet render time constraints checking configuration.
Portlets/pages 'locked down' this way: - PAM (Portlet Application Manager) - RPAD (Remote Portlet Application Deployer) - Permissions & Constraints management - PortalDataSerializer (Import/Export) Modified: portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml Modified: portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml (original) +++ portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml Tue Oct 4 04:10:42 2011 @@ -157,6 +157,48 @@ <js:metadata name="selector.conditional.role">*</js:metadata> </portlet> + <!-- Render time enforced security constaints (admin) --> + + <!-- PAM portlets --> + <portlet> + <portlet-name>RegistryApplicationsList</portlet-name> + <js:metadata name="render-time.security-constraints">true</js:metadata> + </portlet> + <portlet> + <portlet-name>PortletDetailsManager</portlet-name> + <js:metadata name="render-time.security-constraints">true</js:metadata> + </portlet> + <portlet> + <portlet-name>ApplicationDetails</portlet-name> + <js:metadata name="render-time.security-constraints">true</js:metadata> + </portlet> + <portlet> + <portlet-name>PortletCloneManager</portlet-name> + <js:metadata name="render-time.security-constraints">true</js:metadata> + </portlet> + + <!-- Permissions and Constraints --> + <portlet> + <portlet-name>SecurityPermissionsPortlet</portlet-name> + <js:metadata name="render-time.security-constraints">true</js:metadata> + </portlet> + <portlet> + <portlet-name>SecurityConstraintsPortlet</portlet-name> + <js:metadata name="render-time.security-constraints">true</js:metadata> + </portlet> + + <!-- RPAD --> + <portlet> + <portlet-name>RPADPortlet</portlet-name> + <js:metadata name="render-time.security-constraints">true</js:metadata> + </portlet> + + <!-- Serializer --> + <portlet> + <portlet-name>PortalDataSerializer</portlet-name> + <js:metadata name="render-time.security-constraints">true</js:metadata> + </portlet> + <js:services> <js:service name='ApplicationServerManager' /> <js:service name='DeploymentManager' /> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml Tue Oct 4 04:10:42 2011 @@ -43,4 +43,7 @@ limitations under the License. <property layout="TwoColumns" name="column" value="1" /> </fragment> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml Tue Oct 4 04:10:42 2011 @@ -26,5 +26,7 @@ limitations under the License. <property name="column" value="0" layout="OneColumn"/> </fragment> </fragment> - + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml Tue Oct 4 04:10:42 2011 @@ -24,5 +24,7 @@ limitations under the License. <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/> </fragment> - + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml Tue Oct 4 04:10:42 2011 @@ -24,4 +24,7 @@ limitations under the License. <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet" /> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml Tue Oct 4 04:10:42 2011 @@ -24,4 +24,7 @@ limitations under the License. <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet" /> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml Tue Oct 4 04:10:42 2011 @@ -43,4 +43,7 @@ limitations under the License. <property layout="TwoColumns" name="column" value="1" /> </fragment> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml Tue Oct 4 04:10:42 2011 @@ -26,5 +26,7 @@ limitations under the License. <property name="column" value="0" layout="OneColumn"/> </fragment> </fragment> - + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml Tue Oct 4 04:10:42 2011 @@ -24,5 +24,7 @@ limitations under the License. <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/> </fragment> - + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml Tue Oct 4 04:10:42 2011 @@ -24,4 +24,7 @@ limitations under the License. <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet" /> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml Tue Oct 4 04:10:42 2011 @@ -24,4 +24,7 @@ limitations under the License. <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet" /> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml Tue Oct 4 04:10:42 2011 @@ -28,6 +28,9 @@ limitations under the License. <fragment id="admin-db-1010" type="portlet" name="j2-admin::PortalDataSerializer"> <property name="row" value="0" /> <property name="column" value="1" /> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </fragment> </fragment> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml Tue Oct 4 04:10:42 2011 @@ -43,4 +43,7 @@ limitations under the License. <property layout="TwoColumns" name="column" value="1" /> </fragment> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml Tue Oct 4 04:10:42 2011 @@ -27,5 +27,7 @@ limitations under the License. <property name="column" value="0" layout="OneColumn"/> </fragment> </fragment> - + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml Tue Oct 4 04:10:42 2011 @@ -24,4 +24,7 @@ limitations under the License. <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet" /> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml Tue Oct 4 04:10:42 2011 @@ -24,4 +24,7 @@ limitations under the License. <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet" /> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml Tue Oct 4 04:10:42 2011 @@ -24,5 +24,7 @@ limitations under the License. <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/> </fragment> - + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml Tue Oct 4 04:10:42 2011 @@ -43,4 +43,7 @@ limitations under the License. <property layout="TwoColumns" name="column" value="1" /> </fragment> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml Tue Oct 4 04:10:42 2011 @@ -26,5 +26,7 @@ limitations under the License. <property name="column" value="0" layout="OneColumn"/> </fragment> </fragment> - + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml Tue Oct 4 04:10:42 2011 @@ -24,5 +24,7 @@ limitations under the License. <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/> </fragment> - + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml Tue Oct 4 04:10:42 2011 @@ -24,4 +24,7 @@ limitations under the License. <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet" /> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml (original) +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml Tue Oct 4 04:10:42 2011 @@ -24,4 +24,7 @@ limitations under the License. <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn"> <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet" /> </fragment> + <security-constraints> + <security-constraints-ref>admin</security-constraints-ref> + </security-constraints> </page> --------------------------------------------------------------------- To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org