Hi,

but where is the security for then? Theoretically, I can give view and
customization rights, or revoke them, and that would be very nice. Why is
that security implemented is it doesn't really work? Or should it work?

Thank in advance,
                                                      
 Bo van Weert                                         
                                                      
                                                      
                                                      







                                                                                       
         
                    "Stuart                                                            
         
                    Belden"              Para:   <[EMAIL PROTECTED]>             
                    <[EMAIL PROTECTED]        cc:                                      
              
                    org>                 Fax para:                                     
         
                                         Asunto:      Re: user security                
         
                    23/06/2003                                                         
         
                    17:08                                                              
         
                    Por favor,                                                         
         
                    responda a                                                         
         
                    "Jetspeed                                                          
         
                    Users List"                                                        
         
                                                                                       
         
                                                                                       
         



The reason this happens (I'm assuming this is the case for you) is that the
anon user is a bit of a special case.

See JetspeedSecurity.properties, the very bottom of the file under the
"Action Buttons" header:

services.JetspeedSecurity.actions.anon.disable=true
services.JetspeedSecurity.actions.allusers.disable=false

hth,
stu

>>> [EMAIL PROTECTED] 06/22/03 11:57AM >>>
Hello,

I wonder if the following is correct. I added a new user to jetspeed, and
then changed his role to "guest". Then, when I log in as this user, I still
can minimize, configure etc. all the portlets (at least, the buttons are
shown). Why haven't the buttons disappeared? The configuration for this
user is the same as anonymous, and there the buttons are hidden...
I can also customize the control. I assumed that when I didn't give any
permissions, guests wouldn't be able to edit anything. Can anybody shed a
light on that?

Thanks,

Bo


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to