[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2007-04-02 Thread nollie
This thread is helpful for my current problem, but I'm not sure how to interpret this table: ObjectRoleA RoleB Unchecked | Page1 view view-none- |Portlet1 view -none- -none- |

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2007-04-02 Thread PeterJ
Regarding -none-, the last assumption is correct - do not set any permissions for that role on that object The key to removing global visibility is to make sure that the Unchecked pseudo-role does not have any permissions at any level (portal or page). View the original post :

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2007-03-27 Thread tajh
Months later... I think there is a programmatic way to do this. I have had the same issue, using JBP 2.4. You can implement a custom org.jboss.portal.theme.render.DecorationRenderer, or just subclass org.jboss.portal.theme.impl.render.DivDecorationRenderer (assuming you are using the

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-28 Thread franco12
Same wondering ;) View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3974783#3974783 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3974783 ___ jboss-user mailing list

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-28 Thread [EMAIL PROTECTED]
This is not a bug. The whole idea of the portal is to let the users customize their portal (next version of portal will include dashboard management). You want to let the users edit the preferences of a portlet. Let's say you want to let one user display 15 posts per forum page and the other

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-28 Thread PeterJ
But then what is the difference between assigning 'view' access and assigning 'personalize' access? View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3974939#3974939 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3974939

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-28 Thread franco12
For example, my portlet instance has the 3 mods (view, edit, help) In security options I've only the choice to enable or disable view mode for each roles. If I choose to enable the view mode of my portlet instance for a role, It will also have access to edit and help mods. View the original

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-28 Thread zerrt
anonymous wrote : This is not a bug. The whole idea of the portal is to let the users customize their portal (next version of portal will include dashboard management). | | You want to let the users edit the preferences of a portlet. Let's say you want to let one user display 15 posts per

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread mifa
I want all portlets on the same page. I have changed jboss-portal.sar/conf/config.xml to hide (hide) I have created two roles and have assign users to these roles. Further has created page with two portlets and for everyone portlet has assign permission. (For Portlet1 - RoleA, Portlet2 - RoleB

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread PeterJ
What is the security configuration for the two portlet instances? You never said that you set those. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3974569#3974569 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3974569

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread mifa
anonymous wrote : What is the security configuration for the two portlet instances? You never said that you set those. What do you mean? Have you mean security configuration in *-objects.xml? I would like just to assign permission for instance on the fly in administrative portlet. I have

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread PeterJ
I did look at the screen shots, which show the security being set for the page. But you never set security for the portlet instances. To do this, in the Management Portlet, click on the Instances link at the top of the window. That will list all of the portlet instances. Scroll or page

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread mifa
Did I not assign for instances of portlet permission? I thought when I place instance of portlet on page directly, ?hose instance with mouse and pressed the security link, then assigned permission it is enough of it. I have made, as you have written and have assign security properties of each

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread PeterJ
You granted the 'unchecked' role the 'view' access. Remove that access (hold down the CTRL key while clicking 'view' to remove it). View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3974635#3974635 Reply to the post :

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread mifa
It has turned out! Thanks you Peter! :) One more question. When I login as the user I can edit properties of portlet, but I granted role as view and not as personalize. In my case it is properties of news portlet where I set a new source-url. I would like that roles could see, but not edit

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread PeterJ
Notice that the portlet instances only you to choose view access. Thus, personalization does not effect the display of a portlet. That is, any user who can view the portlet can also edit the portlet. So far, I hve not been able to figure out what 'personalization' means. That is, I have not

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread PeterJ
!! s/personalization/personalize/ View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3974651#3974651 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3974651 ___ jboss-user mailing list

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-27 Thread zerrt
I have the same requirement - to be able to have any user see a portlet but only admins be able to use the edit mode. If anyone has figured out how to do this, please post how if you can. It seems to me the personalize permission should be for this, I wonder if it is a bug? View the original

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-26 Thread franco12
Thanks a lot Peter I'm now using ACL on instances and it works great. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3974129#3974129 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3974129

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-25 Thread franco12
I got the same problem ACL are working for 'pages' but not for 'windows'. I'm also unable to find the link to create a user. I'm using JBoss Portal 2.4.0-GA (bundle with AS) on Windows View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3973859#3973859 Reply

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-25 Thread franco12
anonymous wrote : I'm also unable to find the link to create a user. sorry ! I found it :) François View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3973862#3973862 Reply to the post : http://www.jboss.com/index.html?module=bbop=postingmode=replyp=3973862

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-25 Thread [EMAIL PROTECTED]
Yes ACL is not effective for windows. You should rather use ACL for instances. We made that choice to keep security configuration not redundant. View the original post : http://www.jboss.com/index.html?module=bbop=viewtopicp=3973924#3973924 Reply to the post :

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-25 Thread mifa
What is ACL? If I have correctly understood, it can be made all my stuff by editing *-objects.xml only by hand. Is it possible to solve it by program way ( for example to write administrative portlet)? I.e. whether is in a jboss portal necessary API by means of which I can operate

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-25 Thread PeterJ
Did you want all four portlets on the same page or on different pages? For different pages, set it up as follows: ObjectRoleA RoleB Unchecked | Page1 view -none- -none- |Portlet1 -none--none-

[jboss-user] [JBoss Portal] - Re: Security constraints for portlets

2006-09-25 Thread PeterJ
Oops, saw a problem in the single page scenario -- I forgot to give view access to RoleB. Here are the corrected settings: ObjectRoleA RoleB Unchecked | Page1 view view-none- |Portlet1 view