Re: svn commit: r1178678 - in /portals/jetspeed-2: applications/j2-admin/trunk/src/main/webapp/WEB-INF/ portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/ portal/trunk/applications/jetspeed/src/main/weba

Tue, 04 Oct 2011 04:33:39 -0700 

On 10/04/2011 09:22 AM, David Taylor wrote:

+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>


Perhaps when the page is copied or moved with the Site Manager.....
that could be a security hole, although you had to be an Admin to move
or copy the page to begin with.



Correct. If a page already is restricted to admin view only, only a admin user 
will be able to modify/copy/move them through the Site Manager, so this won't be 
a security hole.



Regardless, these extra psml level constraints are only a convenience 
measurement to prevent 'Access Denied' messages to be shown to users not allowed 
to *execute* the portlet.
Even without these psml constraints on page or folder level these portlets are 
'locked down', so there is no possible security hole anyway.





On Tue, Oct 4, 2011 at 12:17 AM, David Taylor<davidseantay...@gmail.com>  wrote:

Ate,

Why are you adding all of these security-constraints-refs to the pages
if the folder already has the exact same security-constraints-ref? The
security constraint is inherited from the folder and the page
constraints are unnecessary


+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>


Thanks,

--
David

On Mon, Oct 3, 2011 at 9:10 PM,<a...@apache.org>  wrote:

Author: ate
Date: Tue Oct  4 04:10:42 2011
New Revision: 1178678

URL: http://svn.apache.org/viewvc?rev=1178678&view=rev
Log:
JS2-1263: Hardening j2-admin security by restricting access to hot deployment 
and portlet metadata features to admin role only
Both portlet render time enforcement of admin constraints and related psml 
level admin constraints (hiding portlets/pages instead of showing 'Access 
Denied')  added
See also JS2-1262 for more detail concerning individual portlet render time 
constraints checking configuration.

Portlets/pages 'locked down' this way:
- PAM (Portlet Application Manager)
- RPAD (Remote Portlet Application Deployer)
- Permissions&  Constraints management
- PortalDataSerializer (Import/Export)

Modified:
    
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
    
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml

Modified: 
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
 (original)
+++ 
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
 Tue Oct  4 04:10:42 2011
@@ -157,6 +157,48 @@
     <js:metadata name="selector.conditional.role">*</js:metadata>
   </portlet>

+<!-- Render time enforced security constaints (admin) -->
+
+<!-- PAM portlets -->
+<portlet>
+<portlet-name>RegistryApplicationsList</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>PortletDetailsManager</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>ApplicationDetails</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>PortletCloneManager</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- Permissions and Constraints -->
+<portlet>
+<portlet-name>SecurityPermissionsPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>SecurityConstraintsPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- RPAD -->
+<portlet>
+<portlet-name>RPADPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- Serializer -->
+<portlet>
+<portlet-name>PortalDataSerializer</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
   <js:services>
     <js:service name='ApplicationServerManager' />
     <js:service name='DeploymentManager' />

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
 Tue Oct  4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
       <property layout="TwoColumns" name="column" value="1" />
     </fragment>
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
 Tue Oct  4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
       <property name="column" value="0" layout="OneColumn"/>
     </fragment>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
 Tue Oct  4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
   <fragment id="export-layout-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="export-2" type="portlet" 
name="j2-admin::PortalDataSerializer"/>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-constraints-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-constraints-2" type="portlet" 
name="j2-admin::SecurityConstraintsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-policy-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-policy-2" type="portlet" 
name="j2-admin::SecurityPermissionsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
 Tue Oct  4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
       <property layout="TwoColumns" name="column" value="1" />
     </fragment>
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
 Tue Oct  4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
       <property name="column" value="0" layout="OneColumn"/>
     </fragment>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
 Tue Oct  4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
   <fragment id="export-layout-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="export-2" type="portlet" 
name="j2-admin::PortalDataSerializer"/>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-constraints-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-constraints-2" type="portlet" 
name="j2-admin::SecurityConstraintsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-policy-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-policy-2" type="portlet" 
name="j2-admin::SecurityPermissionsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
 Tue Oct  4 04:10:42 2011
@@ -28,6 +28,9 @@ limitations under the License.
     <fragment id="admin-db-1010" type="portlet" 
name="j2-admin::PortalDataSerializer">
       <property name="row" value="0" />
       <property name="column" value="1" />
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
     </fragment>
    </fragment>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
 Tue Oct  4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
       <property layout="TwoColumns" name="column" value="1" />
     </fragment>
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
 Tue Oct  4 04:10:42 2011
@@ -27,5 +27,7 @@ limitations under the License.
       <property name="column" value="0" layout="OneColumn"/>
     </fragment>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-constraints-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-constraints-2" type="portlet" 
name="j2-admin::SecurityConstraintsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-policy-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-policy-2" type="portlet" 
name="j2-admin::SecurityPermissionsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
 Tue Oct  4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
   <fragment id="export-layout-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="export-2" type="portlet" 
name="j2-admin::PortalDataSerializer"/>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
 Tue Oct  4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
       <property layout="TwoColumns" name="column" value="1" />
     </fragment>
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
 Tue Oct  4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
       <property name="column" value="0" layout="OneColumn"/>
     </fragment>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
 Tue Oct  4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
   <fragment id="export-layout-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="export-2" type="portlet" 
name="j2-admin::PortalDataSerializer"/>
   </fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-constraints-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-constraints-2" type="portlet" 
name="j2-admin::SecurityConstraintsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>

Modified: 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
URL: 
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
==============================================================================
--- 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
 (original)
+++ 
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
 Tue Oct  4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
   <fragment id="m-security-policy-1" type="layout" 
name="jetspeed-layouts::VelocityOneColumn">
     <fragment id="m-security-policy-2" type="portlet" 
name="j2-admin::SecurityPermissionsPortlet" />
   </fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
  </page>



---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org
For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org






--
David








---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org
For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org























					Reply via email to