Re: svn commit: r1178678 - in /portals/jetspeed-2: applications/j2-admin/trunk/src/main/webapp/WEB-INF/ portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/ portal/trunk/applications/jetspeed/src/main/weba

Tue, 04 Oct 2011 04:29:16 -0700 

On 10/04/2011 09:17 AM, David Taylor wrote:

Ate,

Why are you adding all of these security-constraints-refs to the pages
if the folder already has the exact same security-constraints-ref? The
security constraint is inherited from the folder and the page
constraints are unnecessary


+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
David, you are right: for most of these this actually isn't needed as the inherited folder security constraints already will enforce it.
With one exception though: the demo pages for the classic (portal) ui still has everything in one folder (/Administrative) using 
  <security-constaints-ref>manager</security-constraints-ref>
Because of that use-case (which I think is a valid and good example, not sure why that was removed from the jetui demo configuration), I had to enforce these constraints on psml page level there. And because it was late I simply applied the same change on every psml reference for these 'locked down' portlets.
I can remove these changes where they are redundant, now, but if/when we would add a manager role to the jetui demo similar to the classic demo pages, these extra constraints would be needed. 

WDYT?

Ate


Thanks,

--
David

On Mon, Oct 3, 2011 at 9:10 PM,<a...@apache.org>  wrote:

Author: ate
Date: Tue Oct  4 04:10:42 2011
New Revision: 1178678

URL: http://svn.apache.org/viewvc?rev=1178678&view=rev
Log:
JS2-1263: Hardening j2-admin security by restricting access to hot deployment 
and portlet metadata features to admin role only
Both portlet render time enforcement of admin constraints and related psml 
level admin constraints (hiding portlets/pages instead of showing 'Access 
Denied')  added
See also JS2-1262 for more detail concerning individual portlet render time 
constraints checking configuration.

Portlets/pages 'locked down' this way:
- PAM (Portlet Application Manager)
- RPAD (Remote Portlet Application Deployer)
- Permissions&  Constraints management
- PortalDataSerializer (Import/Export)

Modified:
    
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml

Modified: 
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
 (original)
+++ 
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
 Tue Oct  4 04:10:42 2011
@@ -157,6 +157,48 @@
     <js:metadata name="selector.conditional.role">*</js:metadata>
   </portlet>

+<!-- Render time enforced security constaints (admin) -->
+
+<!-- PAM portlets -->
+<portlet>
+<portlet-name>RegistryApplicationsList</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>PortletDetailsManager</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>ApplicationDetails</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>PortletCloneManager</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- Permissions and Constraints -->
+<portlet>
+<portlet-name>SecurityPermissionsPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>SecurityConstraintsPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- RPAD -->
+<portlet>
+<portlet-name>RPADPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- Serializer -->
+<portlet>
+<portlet-name>PortalDataSerializer</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
   <js:services>
     <js:service name='ApplicationServerManager' />
     <js:service name='DeploymentManager' />

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
 Tue Oct  4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
       <property layout="TwoColumns" name="column" value="1" />
     </fragment>
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
 Tue Oct  4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
       <property name="column" value="0" layout="OneColumn"/>
     </fragment>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
 Tue Oct  4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
   <fragment id="export-layout-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="export-2" type="portlet" 
name="j2-admin::PortalDataSerializer"/>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-constraints-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-constraints-2" type="portlet" 
name="j2-admin::SecurityConstraintsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-policy-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-policy-2" type="portlet" 
name="j2-admin::SecurityPermissionsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
 Tue Oct  4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
       <property layout="TwoColumns" name="column" value="1" />
     </fragment>
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
 Tue Oct  4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
       <property name="column" value="0" layout="OneColumn"/>
     </fragment>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
 Tue Oct  4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
   <fragment id="export-layout-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="export-2" type="portlet" 
name="j2-admin::PortalDataSerializer"/>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-constraints-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-constraints-2" type="portlet" 
name="j2-admin::SecurityConstraintsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-policy-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-policy-2" type="portlet" 
name="j2-admin::SecurityPermissionsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
 Tue Oct  4 04:10:42 2011
@@ -28,6 +28,9 @@ limitations under the License.
     <fragment id="admin-db-1010" type="portlet" 
name="j2-admin::PortalDataSerializer">
       <property name="row" value="0" />
       <property name="column" value="1" />
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
     </fragment>
    </fragment>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
 Tue Oct  4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
       <property layout="TwoColumns" name="column" value="1" />
     </fragment>
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
 Tue Oct  4 04:10:42 2011
@@ -27,5 +27,7 @@ limitations under the License.
       <property name="column" value="0" layout="OneColumn"/>
     </fragment>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-constraints-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-constraints-2" type="portlet" 
name="j2-admin::SecurityConstraintsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-policy-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-policy-2" type="portlet" 
name="j2-admin::SecurityPermissionsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
 Tue Oct  4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
   <fragment id="export-layout-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="export-2" type="portlet" 
name="j2-admin::PortalDataSerializer"/>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
 Tue Oct  4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
       <property layout="TwoColumns" name="column" value="1" />
     </fragment>
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
 Tue Oct  4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
       <property name="column" value="0" layout="OneColumn"/>
     </fragment>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
 Tue Oct  4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
   <fragment id="export-layout-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="export-2" type="portlet" 
name="j2-admin::PortalDataSerializer"/>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-constraints-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-constraints-2" type="portlet" 
name="j2-admin::SecurityConstraintsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-policy-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-policy-2" type="portlet" 
name="j2-admin::SecurityPermissionsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>



---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org
For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org









---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org
For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org

Reply via email to