Re: svn commit: r1178678 - in /portals/jetspeed-2: applications/j2-admin/trunk/src/main/webapp/WEB-INF/ portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/ portal/trunk/applications/jetspeed/src/main/weba

Tue, 04 Oct 2011 04:51:09 -0700 

On 10/04/2011 01:28 PM, Ate Douma wrote:

On 10/04/2011 09:17 AM, David Taylor wrote:

Ate,

Why are you adding all of these security-constraints-refs to the pages
if the folder already has the exact same security-constraints-ref? The
security constraint is inherited from the folder and the page
constraints are unnecessary


+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>



David, you are right: for most of these this actually isn't needed as the
inherited folder security constraints already will enforce it.

With one exception though: the demo pages for the classic (portal) ui still has
everything in one folder (/Administrative) using
<security-constaints-ref>manager</security-constraints-ref>

Because of that use-case (which I think is a valid and good example, not sure
why that was removed from the jetui demo configuration), I had to enforce these
constraints on psml page level there.
And because it was late I simply applied the same change on every psml reference
for these 'locked down' portlets.

I can remove these changes where they are redundant, now, but if/when we would
add a manager role to the jetui demo similar to the classic demo pages, these
extra constraints would be needed.

WDYT?
On second thoughts: I think its actually quite nice we have such different demo configurations, the 'classic' one showing both admin and manager access usages to the administrative portlets, while the jetui demo showing a much more 'tuned' variant with only delegated user security on the devmgr role.
So I think I like to keep it as is, and therefore will remove the redundant psml constraints again, except for the 'classic' demo psml which really does need them. 

Thanks for pointing it out David!

Regards,

Ate




Ate


Thanks,

--
David

On Mon, Oct 3, 2011 at 9:10 PM,<a...@apache.org> wrote:

Author: ate
Date: Tue Oct 4 04:10:42 2011
New Revision: 1178678

URL: http://svn.apache.org/viewvc?rev=1178678&view=rev
Log:
JS2-1263: Hardening j2-admin security by restricting access to hot deployment
and portlet metadata features to admin role only
Both portlet render time enforcement of admin constraints and related psml
level admin constraints (hiding portlets/pages instead of showing 'Access
Denied') added
See also JS2-1262 for more detail concerning individual portlet render time
constraints checking configuration.

Portlets/pages 'locked down' this way:
- PAM (Portlet Application Manager)
- RPAD (Remote Portlet Application Deployer)
- Permissions& Constraints management
- PortalDataSerializer (Import/Export)

Modified:
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml

portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml


Modified:
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
(original)
+++
portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
Tue Oct 4 04:10:42 2011
@@ -157,6 +157,48 @@
<js:metadata name="selector.conditional.role">*</js:metadata>
</portlet>

+<!-- Render time enforced security constaints (admin) -->
+
+<!-- PAM portlets -->
+<portlet>
+<portlet-name>RegistryApplicationsList</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>PortletDetailsManager</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>ApplicationDetails</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>PortletCloneManager</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- Permissions and Constraints -->
+<portlet>
+<portlet-name>SecurityPermissionsPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+<portlet>
+<portlet-name>SecurityConstraintsPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- RPAD -->
+<portlet>
+<portlet-name>RPADPortlet</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
+<!-- Serializer -->
+<portlet>
+<portlet-name>PortalDataSerializer</portlet-name>
+<js:metadata name="render-time.security-constraints">true</js:metadata>
+</portlet>
+
<js:services>
<js:service name='ApplicationServerManager' />
<js:service name='DeploymentManager' />

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
Tue Oct 4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
<property layout="TwoColumns" name="column" value="1" />
</fragment>
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
Tue Oct 4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
<property name="column" value="0" layout="OneColumn"/>
</fragment>
</fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
Tue Oct 4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
<fragment id="export-layout-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
</fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
Tue Oct 4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
<fragment id="m-security-constraints-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="m-security-constraints-2" type="portlet"
name="j2-admin::SecurityConstraintsPortlet" />
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
Tue Oct 4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
<fragment id="m-security-policy-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="m-security-policy-2" type="portlet"
name="j2-admin::SecurityPermissionsPortlet" />
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
Tue Oct 4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
<property layout="TwoColumns" name="column" value="1" />
</fragment>
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
Tue Oct 4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
<property name="column" value="0" layout="OneColumn"/>
</fragment>
</fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
Tue Oct 4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
<fragment id="export-layout-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
</fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
Tue Oct 4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
<fragment id="m-security-constraints-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="m-security-constraints-2" type="portlet"
name="j2-admin::SecurityConstraintsPortlet" />
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
Tue Oct 4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
<fragment id="m-security-policy-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="m-security-policy-2" type="portlet"
name="j2-admin::SecurityPermissionsPortlet" />
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
Tue Oct 4 04:10:42 2011
@@ -28,6 +28,9 @@ limitations under the License.
<fragment id="admin-db-1010" type="portlet"
name="j2-admin::PortalDataSerializer">
<property name="row" value="0" />
<property name="column" value="1" />
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</fragment>
</fragment>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
Tue Oct 4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
<property layout="TwoColumns" name="column" value="1" />
</fragment>
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
Tue Oct 4 04:10:42 2011
@@ -27,5 +27,7 @@ limitations under the License.
<property name="column" value="0" layout="OneColumn"/>
</fragment>
</fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
Tue Oct 4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
<fragment id="m-security-constraints-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="m-security-constraints-2" type="portlet"
name="j2-admin::SecurityConstraintsPortlet" />
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
Tue Oct 4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
<fragment id="m-security-policy-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="m-security-policy-2" type="portlet"
name="j2-admin::SecurityPermissionsPortlet" />
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
Tue Oct 4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
<fragment id="export-layout-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
</fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
Tue Oct 4 04:10:42 2011
@@ -43,4 +43,7 @@ limitations under the License.
<property layout="TwoColumns" name="column" value="1" />
</fragment>
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
Tue Oct 4 04:10:42 2011
@@ -26,5 +26,7 @@ limitations under the License.
<property name="column" value="0" layout="OneColumn"/>
</fragment>
</fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
Tue Oct 4 04:10:42 2011
@@ -24,5 +24,7 @@ limitations under the License.
<fragment id="export-layout-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
</fragment>
-
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
Tue Oct 4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
<fragment id="m-security-constraints-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="m-security-constraints-2" type="portlet"
name="j2-admin::SecurityConstraintsPortlet" />
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>

Modified:
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml

URL:
http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff

==============================================================================
---
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
(original)
+++
portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
Tue Oct 4 04:10:42 2011
@@ -24,4 +24,7 @@ limitations under the License.
<fragment id="m-security-policy-1" type="layout"
name="jetspeed-layouts::VelocityOneColumn">
<fragment id="m-security-policy-2" type="portlet"
name="j2-admin::SecurityPermissionsPortlet" />
</fragment>
+<security-constraints>
+<security-constraints-ref>admin</security-constraints-ref>
+</security-constraints>
</page>



---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org
For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org











---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org
For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org

Reply via email to