> + <security-constraints> > + <security-constraints-ref>admin</security-constraints-ref> > + </security-constraints>
Perhaps when the page is copied or moved with the Site Manager..... that could be a security hole, although you had to be an Admin to move or copy the page to begin with. On Tue, Oct 4, 2011 at 12:17 AM, David Taylor <davidseantay...@gmail.com> wrote: > Ate, > > Why are you adding all of these security-constraints-refs to the pages > if the folder already has the exact same security-constraints-ref? The > security constraint is inherited from the folder and the page > constraints are unnecessary > >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> > > Thanks, > > -- > David > > On Mon, Oct 3, 2011 at 9:10 PM, <a...@apache.org> wrote: >> Author: ate >> Date: Tue Oct 4 04:10:42 2011 >> New Revision: 1178678 >> >> URL: http://svn.apache.org/viewvc?rev=1178678&view=rev >> Log: >> JS2-1263: Hardening j2-admin security by restricting access to hot >> deployment and portlet metadata features to admin role only >> Both portlet render time enforcement of admin constraints and related psml >> level admin constraints (hiding portlets/pages instead of showing 'Access >> Denied') added >> See also JS2-1262 for more detail concerning individual portlet render time >> constraints checking configuration. >> >> Portlets/pages 'locked down' this way: >> - PAM (Portlet Application Manager) >> - RPAD (Remote Portlet Application Deployer) >> - Permissions & Constraints management >> - PortalDataSerializer (Import/Export) >> >> Modified: >> >> portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml >> >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml >> >> Modified: >> portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml >> (original) >> +++ >> portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml >> Tue Oct 4 04:10:42 2011 >> @@ -157,6 +157,48 @@ >> <js:metadata name="selector.conditional.role">*</js:metadata> >> </portlet> >> >> + <!-- Render time enforced security constaints (admin) --> >> + >> + <!-- PAM portlets --> >> + <portlet> >> + <portlet-name>RegistryApplicationsList</portlet-name> >> + <js:metadata name="render-time.security-constraints">true</js:metadata> >> + </portlet> >> + <portlet> >> + <portlet-name>PortletDetailsManager</portlet-name> >> + <js:metadata name="render-time.security-constraints">true</js:metadata> >> + </portlet> >> + <portlet> >> + <portlet-name>ApplicationDetails</portlet-name> >> + <js:metadata name="render-time.security-constraints">true</js:metadata> >> + </portlet> >> + <portlet> >> + <portlet-name>PortletCloneManager</portlet-name> >> + <js:metadata name="render-time.security-constraints">true</js:metadata> >> + </portlet> >> + >> + <!-- Permissions and Constraints --> >> + <portlet> >> + <portlet-name>SecurityPermissionsPortlet</portlet-name> >> + <js:metadata name="render-time.security-constraints">true</js:metadata> >> + </portlet> >> + <portlet> >> + <portlet-name>SecurityConstraintsPortlet</portlet-name> >> + <js:metadata name="render-time.security-constraints">true</js:metadata> >> + </portlet> >> + >> + <!-- RPAD --> >> + <portlet> >> + <portlet-name>RPADPortlet</portlet-name> >> + <js:metadata name="render-time.security-constraints">true</js:metadata> >> + </portlet> >> + >> + <!-- Serializer --> >> + <portlet> >> + <portlet-name>PortalDataSerializer</portlet-name> >> + <js:metadata name="render-time.security-constraints">true</js:metadata> >> + </portlet> >> + >> <js:services> >> <js:service name='ApplicationServerManager' /> >> <js:service name='DeploymentManager' /> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml >> Tue Oct 4 04:10:42 2011 >> @@ -43,4 +43,7 @@ limitations under the License. >> <property layout="TwoColumns" name="column" value="1" /> >> </fragment> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml >> Tue Oct 4 04:10:42 2011 >> @@ -26,5 +26,7 @@ limitations under the License. >> <property name="column" value="0" layout="OneColumn"/> >> </fragment> >> </fragment> >> - >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,5 +24,7 @@ limitations under the License. >> <fragment id="export-layout-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="export-2" type="portlet" >> name="j2-admin::PortalDataSerializer"/> >> </fragment> >> - >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,4 +24,7 @@ limitations under the License. >> <fragment id="m-security-constraints-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="m-security-constraints-2" type="portlet" >> name="j2-admin::SecurityConstraintsPortlet" /> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,4 +24,7 @@ limitations under the License. >> <fragment id="m-security-policy-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="m-security-policy-2" type="portlet" >> name="j2-admin::SecurityPermissionsPortlet" /> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml >> Tue Oct 4 04:10:42 2011 >> @@ -43,4 +43,7 @@ limitations under the License. >> <property layout="TwoColumns" name="column" value="1" /> >> </fragment> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml >> Tue Oct 4 04:10:42 2011 >> @@ -26,5 +26,7 @@ limitations under the License. >> <property name="column" value="0" layout="OneColumn"/> >> </fragment> >> </fragment> >> - >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,5 +24,7 @@ limitations under the License. >> <fragment id="export-layout-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="export-2" type="portlet" >> name="j2-admin::PortalDataSerializer"/> >> </fragment> >> - >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,4 +24,7 @@ limitations under the License. >> <fragment id="m-security-constraints-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="m-security-constraints-2" type="portlet" >> name="j2-admin::SecurityConstraintsPortlet" /> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,4 +24,7 @@ limitations under the License. >> <fragment id="m-security-policy-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="m-security-policy-2" type="portlet" >> name="j2-admin::SecurityPermissionsPortlet" /> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml >> Tue Oct 4 04:10:42 2011 >> @@ -28,6 +28,9 @@ limitations under the License. >> <fragment id="admin-db-1010" type="portlet" >> name="j2-admin::PortalDataSerializer"> >> <property name="row" value="0" /> >> <property name="column" value="1" /> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </fragment> >> </fragment> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml >> Tue Oct 4 04:10:42 2011 >> @@ -43,4 +43,7 @@ limitations under the License. >> <property layout="TwoColumns" name="column" value="1" /> >> </fragment> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml >> Tue Oct 4 04:10:42 2011 >> @@ -27,5 +27,7 @@ limitations under the License. >> <property name="column" value="0" layout="OneColumn"/> >> </fragment> >> </fragment> >> - >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,4 +24,7 @@ limitations under the License. >> <fragment id="m-security-constraints-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="m-security-constraints-2" type="portlet" >> name="j2-admin::SecurityConstraintsPortlet" /> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,4 +24,7 @@ limitations under the License. >> <fragment id="m-security-policy-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="m-security-policy-2" type="portlet" >> name="j2-admin::SecurityPermissionsPortlet" /> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,5 +24,7 @@ limitations under the License. >> <fragment id="export-layout-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="export-2" type="portlet" >> name="j2-admin::PortalDataSerializer"/> >> </fragment> >> - >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml >> Tue Oct 4 04:10:42 2011 >> @@ -43,4 +43,7 @@ limitations under the License. >> <property layout="TwoColumns" name="column" value="1" /> >> </fragment> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml >> Tue Oct 4 04:10:42 2011 >> @@ -26,5 +26,7 @@ limitations under the License. >> <property name="column" value="0" layout="OneColumn"/> >> </fragment> >> </fragment> >> - >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,5 +24,7 @@ limitations under the License. >> <fragment id="export-layout-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="export-2" type="portlet" >> name="j2-admin::PortalDataSerializer"/> >> </fragment> >> - >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,4 +24,7 @@ limitations under the License. >> <fragment id="m-security-constraints-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="m-security-constraints-2" type="portlet" >> name="j2-admin::SecurityConstraintsPortlet" /> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> Modified: >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml >> URL: >> http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff >> ============================================================================== >> --- >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml >> (original) >> +++ >> portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml >> Tue Oct 4 04:10:42 2011 >> @@ -24,4 +24,7 @@ limitations under the License. >> <fragment id="m-security-policy-1" type="layout" >> name="jetspeed-layouts::VelocityOneColumn"> >> <fragment id="m-security-policy-2" type="portlet" >> name="j2-admin::SecurityPermissionsPortlet" /> >> </fragment> >> + <security-constraints> >> + <security-constraints-ref>admin</security-constraints-ref> >> + </security-constraints> >> </page> >> >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org >> For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org >> >> > > > > -- > David > -- David --------------------------------------------------------------------- To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org
