Ate, Why are you adding all of these security-constraints-refs to the pages if the folder already has the exact same security-constraints-ref? The security constraint is inherited from the folder and the page constraints are unnecessary
> + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> Thanks, -- David On Mon, Oct 3, 2011 at 9:10 PM, <a...@apache.org> wrote: > Author: ate > Date: Tue Oct 4 04:10:42 2011 > New Revision: 1178678 > > URL: http://svn.apache.org/viewvc?rev=1178678&view=rev > Log: > JS2-1263: Hardening j2-admin security by restricting access to hot deployment > and portlet metadata features to admin role only > Both portlet render time enforcement of admin constraints and related psml > level admin constraints (hiding portlets/pages instead of showing 'Access > Denied') added > See also JS2-1262 for more detail concerning individual portlet render time > constraints checking configuration. > > Portlets/pages 'locked down' this way: > - PAM (Portlet Application Manager) > - RPAD (Remote Portlet Application Deployer) > - Permissions & Constraints management > - PortalDataSerializer (Import/Export) > > Modified: > > portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml > > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml > > Modified: > portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml > (original) > +++ > portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml > Tue Oct 4 04:10:42 2011 > @@ -157,6 +157,48 @@ > <js:metadata name="selector.conditional.role">*</js:metadata> > </portlet> > > + <!-- Render time enforced security constaints (admin) --> > + > + <!-- PAM portlets --> > + <portlet> > + <portlet-name>RegistryApplicationsList</portlet-name> > + <js:metadata name="render-time.security-constraints">true</js:metadata> > + </portlet> > + <portlet> > + <portlet-name>PortletDetailsManager</portlet-name> > + <js:metadata name="render-time.security-constraints">true</js:metadata> > + </portlet> > + <portlet> > + <portlet-name>ApplicationDetails</portlet-name> > + <js:metadata name="render-time.security-constraints">true</js:metadata> > + </portlet> > + <portlet> > + <portlet-name>PortletCloneManager</portlet-name> > + <js:metadata name="render-time.security-constraints">true</js:metadata> > + </portlet> > + > + <!-- Permissions and Constraints --> > + <portlet> > + <portlet-name>SecurityPermissionsPortlet</portlet-name> > + <js:metadata name="render-time.security-constraints">true</js:metadata> > + </portlet> > + <portlet> > + <portlet-name>SecurityConstraintsPortlet</portlet-name> > + <js:metadata name="render-time.security-constraints">true</js:metadata> > + </portlet> > + > + <!-- RPAD --> > + <portlet> > + <portlet-name>RPADPortlet</portlet-name> > + <js:metadata name="render-time.security-constraints">true</js:metadata> > + </portlet> > + > + <!-- Serializer --> > + <portlet> > + <portlet-name>PortalDataSerializer</portlet-name> > + <js:metadata name="render-time.security-constraints">true</js:metadata> > + </portlet> > + > <js:services> > <js:service name='ApplicationServerManager' /> > <js:service name='DeploymentManager' /> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml > Tue Oct 4 04:10:42 2011 > @@ -43,4 +43,7 @@ limitations under the License. > <property layout="TwoColumns" name="column" value="1" /> > </fragment> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml > Tue Oct 4 04:10:42 2011 > @@ -26,5 +26,7 @@ limitations under the License. > <property name="column" value="0" layout="OneColumn"/> > </fragment> > </fragment> > - > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml > Tue Oct 4 04:10:42 2011 > @@ -24,5 +24,7 @@ limitations under the License. > <fragment id="export-layout-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="export-2" type="portlet" > name="j2-admin::PortalDataSerializer"/> > </fragment> > - > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml > Tue Oct 4 04:10:42 2011 > @@ -24,4 +24,7 @@ limitations under the License. > <fragment id="m-security-constraints-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="m-security-constraints-2" type="portlet" > name="j2-admin::SecurityConstraintsPortlet" /> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml > Tue Oct 4 04:10:42 2011 > @@ -24,4 +24,7 @@ limitations under the License. > <fragment id="m-security-policy-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="m-security-policy-2" type="portlet" > name="j2-admin::SecurityPermissionsPortlet" /> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml > Tue Oct 4 04:10:42 2011 > @@ -43,4 +43,7 @@ limitations under the License. > <property layout="TwoColumns" name="column" value="1" /> > </fragment> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml > Tue Oct 4 04:10:42 2011 > @@ -26,5 +26,7 @@ limitations under the License. > <property name="column" value="0" layout="OneColumn"/> > </fragment> > </fragment> > - > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml > Tue Oct 4 04:10:42 2011 > @@ -24,5 +24,7 @@ limitations under the License. > <fragment id="export-layout-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="export-2" type="portlet" > name="j2-admin::PortalDataSerializer"/> > </fragment> > - > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml > Tue Oct 4 04:10:42 2011 > @@ -24,4 +24,7 @@ limitations under the License. > <fragment id="m-security-constraints-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="m-security-constraints-2" type="portlet" > name="j2-admin::SecurityConstraintsPortlet" /> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml > Tue Oct 4 04:10:42 2011 > @@ -24,4 +24,7 @@ limitations under the License. > <fragment id="m-security-policy-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="m-security-policy-2" type="portlet" > name="j2-admin::SecurityPermissionsPortlet" /> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml > Tue Oct 4 04:10:42 2011 > @@ -28,6 +28,9 @@ limitations under the License. > <fragment id="admin-db-1010" type="portlet" > name="j2-admin::PortalDataSerializer"> > <property name="row" value="0" /> > <property name="column" value="1" /> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </fragment> > </fragment> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml > Tue Oct 4 04:10:42 2011 > @@ -43,4 +43,7 @@ limitations under the License. > <property layout="TwoColumns" name="column" value="1" /> > </fragment> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml > Tue Oct 4 04:10:42 2011 > @@ -27,5 +27,7 @@ limitations under the License. > <property name="column" value="0" layout="OneColumn"/> > </fragment> > </fragment> > - > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml > Tue Oct 4 04:10:42 2011 > @@ -24,4 +24,7 @@ limitations under the License. > <fragment id="m-security-constraints-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="m-security-constraints-2" type="portlet" > name="j2-admin::SecurityConstraintsPortlet" /> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml > Tue Oct 4 04:10:42 2011 > @@ -24,4 +24,7 @@ limitations under the License. > <fragment id="m-security-policy-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="m-security-policy-2" type="portlet" > name="j2-admin::SecurityPermissionsPortlet" /> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml > Tue Oct 4 04:10:42 2011 > @@ -24,5 +24,7 @@ limitations under the License. > <fragment id="export-layout-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="export-2" type="portlet" > name="j2-admin::PortalDataSerializer"/> > </fragment> > - > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml > Tue Oct 4 04:10:42 2011 > @@ -43,4 +43,7 @@ limitations under the License. > <property layout="TwoColumns" name="column" value="1" /> > </fragment> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml > Tue Oct 4 04:10:42 2011 > @@ -26,5 +26,7 @@ limitations under the License. > <property name="column" value="0" layout="OneColumn"/> > </fragment> > </fragment> > - > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml > Tue Oct 4 04:10:42 2011 > @@ -24,5 +24,7 @@ limitations under the License. > <fragment id="export-layout-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="export-2" type="portlet" > name="j2-admin::PortalDataSerializer"/> > </fragment> > - > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml > Tue Oct 4 04:10:42 2011 > @@ -24,4 +24,7 @@ limitations under the License. > <fragment id="m-security-constraints-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="m-security-constraints-2" type="portlet" > name="j2-admin::SecurityConstraintsPortlet" /> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > Modified: > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml > URL: > http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff > ============================================================================== > --- > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml > (original) > +++ > portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml > Tue Oct 4 04:10:42 2011 > @@ -24,4 +24,7 @@ limitations under the License. > <fragment id="m-security-policy-1" type="layout" > name="jetspeed-layouts::VelocityOneColumn"> > <fragment id="m-security-policy-2" type="portlet" > name="j2-admin::SecurityPermissionsPortlet" /> > </fragment> > + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints> > </page> > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org > For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org > > -- David --------------------------------------------------------------------- To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org
