Author: taylor Date: Fri Jan 15 01:11:21 2016 New Revision: 1724714 URL: http://svn.apache.org/viewvc?rev=1724714&view=rev Log: fixing backward compatibility issue with migrating from version 2.1.3, which allowed more lenient delegated security assignments. Note this feature should be turned off by default
Modified: portals/jetspeed-2/portal/trunk/jetspeed-api/src/main/java/org/apache/jetspeed/administration/PortalConfigurationConstants.java portals/jetspeed-2/portal/trunk/jetspeed-portal-resources/src/main/resources/conf/jetspeed/jetspeed.properties Modified: portals/jetspeed-2/portal/trunk/jetspeed-api/src/main/java/org/apache/jetspeed/administration/PortalConfigurationConstants.java URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/jetspeed-api/src/main/java/org/apache/jetspeed/administration/PortalConfigurationConstants.java?rev=1724714&r1=1724713&r2=1724714&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/jetspeed-api/src/main/java/org/apache/jetspeed/administration/PortalConfigurationConstants.java (original) +++ portals/jetspeed-2/portal/trunk/jetspeed-api/src/main/java/org/apache/jetspeed/administration/PortalConfigurationConstants.java Fri Jan 15 01:11:21 2016 @@ -72,7 +72,8 @@ public interface PortalConfigurationCons static final String ROLES_DEFAULT_MANAGER = "default.manager.role"; static final String ROLES_DEFAULT_USER = "default.user.role"; static final String ROLES_DEFAULT_GUEST = "default.guest.role"; - + static final String ALLOW_DELEGATE_ASSIGN_ROLES = "allow.delegate.assign.roles"; + /** Jetui */ static final String JETUI_CUSTOMIZATION_METHOD = "jetui.customization.method"; static final String JETUI_CUSTOMIZATION_SERVER = "server"; Modified: portals/jetspeed-2/portal/trunk/jetspeed-portal-resources/src/main/resources/conf/jetspeed/jetspeed.properties URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/jetspeed-portal-resources/src/main/resources/conf/jetspeed/jetspeed.properties?rev=1724714&r1=1724713&r2=1724714&view=diff ============================================================================== --- portals/jetspeed-2/portal/trunk/jetspeed-portal-resources/src/main/resources/conf/jetspeed/jetspeed.properties (original) +++ portals/jetspeed-2/portal/trunk/jetspeed-portal-resources/src/main/resources/conf/jetspeed/jetspeed.properties Fri Jan 15 01:11:21 2016 @@ -103,8 +103,8 @@ supported.windowstate.additional.default # ------------------------------------------------------------------- # Portlet Container Runtime Options # ------------------------------------------------------------------- -container.supported.runtimeOption=escapeXML -container.supported.runtimeOption=javax.portlet.servletDefaultSessionScope +container.supported.runtimeOption=escapeXML +container.supported.runtimeOption=javax.portlet.servletDefaultSessionScope # ------------------------------------------------------------------- # Security Information @@ -118,6 +118,9 @@ default.admin.role=admin default.manager.role=manager default.user.role=user default.guest.role=guest +# some systems require delegated admins to assign roles and groups without owning the roles or groups +# this setting should be used carefully +allow.delegate.assign.roles=false # ------------------------------------------------------------------- # L O G 4 J - L O G G I N G --------------------------------------------------------------------- To unsubscribe, e-mail: jetspeed-dev-unsubscr...@portals.apache.org For additional commands, e-mail: jetspeed-dev-h...@portals.apache.org