You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by Bob Fleischman <bo...@mindspring.com> on 2004/04/01 02:35:03 UTC
RE: Hide Categories of Portlets from Groups of Users
David:
I modified the code to check for PERMISSION_PERSONIZE and added a new
security constraint "user-select_admin-all"
If a portlet is marked "user-view_admin-all" they can not select it but they
can view it. If I set it to "user-select_admin_all" they can do both.
Bob
-----Original Message-----
From: David Sean Taylor [mailto:david@bluesunrise.com]
Sent: Tuesday, March 30, 2004 5:42 PM
To: Jetspeed Users List
Subject: Re: Hide Categories of Portlets from Groups of Users
On Tuesday, March 30, 2004, at 04:00 PM, Bob Fleischman wrote:
> I've traced into this. In CustomSetAction the permission that is being
> checked is 'View' access. Therefore the "user-view_admin-all" does not
> prevent them from selecting the portlet for their home page.
>
> if (JetspeedSecurity.checkPermission((JetspeedUser) data.getUser(),
> new PortalResource(entry),
> JetspeedSecurity.PERMISSION_VIEW)
>
> I've been looking at some of the other permissions. What is the
> difference
> between 'personalize' and 'customize'?
>
Personalize is not used, but you may be on to something there
If we check the personalize permission when listing portlets, this
could work as a special permission to list portlets in the customizer's
portlet list
> Bob
>
> Ps. I've got a feeling I'm going to need to create my own custom
> CustomSetAction.
>
>
> -----Original Message-----
> From: David Sean Taylor [mailto:david@bluesunrise.com]
> Sent: Monday, March 29, 2004 8:28 PM
> To: Jetspeed Users List
> Subject: Re: Hide Categories of Portlets from Groups of Users
>
>
> On Monday, March 29, 2004, at 05:39 PM, Bob Fleischman wrote:
>
>> On a related note. . .
>>
>> Is there a security setting on a given portlet so that only an admin
>> can add
>> it to a page?
>>
> Sure, just setup a security constraint using the Security Browser (from
> the Admin UI)
> There is one already deployed with the default deployment called
> "user-view_admin-all" that may work for you
>
> If you want to use that constraint for all portlet instances in the
> system, go to the Portlet Browser,
> find your portlet, edit it, go to the first tab (Information) and set
> the Security Reference there.
>
> You can also override the constraint on a per portlet instance basis
> with the portlet customizer
>
>> We have some portlets we only want on public pages and we do not want
>> users
>> to be able to put them on their home pages.
>>
>> Thanks
>>
>> Bob
>> -----Original Message-----
>> From: David Sean Taylor [mailto:david@bluesunrise.com]
>> Sent: Sunday, March 28, 2004 5:38 PM
>> To: Jetspeed Users List
>> Subject: Re: Hide Categories of Portlets from Groups of Users
>>
>>
>> On Sunday, March 28, 2004, at 04:19 PM, Bob Fleischman wrote:
>>
>>> I know I can prevent users from seeing individual portlets in the
>>> PSML
>>> Customizer by setting security on the portlet accordingly.
>>>
>>>
>>>
>>> Is it possible to set security on an entire category of portlets so
>>> that it
>>> does not show up in the drop down list?
>>>
>> That would take some custom code.
>> Currently there are no security constraints associations on categories
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
>> For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
>> For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
>>
>>
>
> --
> David Sean Taylor
> Bluesunrise Software
> david@bluesunrise.com
> [office] +01 707 773-4646
> [mobile] +01 707 529 9194
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
>
>
--
David Sean Taylor
Bluesunrise Software
david@bluesunrise.com
[office] +01 707 773-4646
[mobile] +01 707 529 9194
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
Re: Hide Categories of Portlets from Groups of Users
Posted by David Sean Taylor <da...@bluesunrise.com>.
On Thursday, April 1, 2004, at 11:19 AM, Bob Fleischman wrote:
> I've had to modify this unit for some other items (We wanted a
> different
> default for the group selection instead of 'All Portlets')
>
> Is there a way I can submit a patch for just the change I made? I've
> never
> submitted a patch before.
>
Do you use Eclipse? It can generate a patch for you.
Thats probably the easiest way
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
RE: Hide Categories of Portlets from Groups of Users
Posted by Bob Fleischman <bo...@mindspring.com>.
I've had to modify this unit for some other items (We wanted a different
default for the group selection instead of 'All Portlets')
Is there a way I can submit a patch for just the change I made? I've never
submitted a patch before.
-----Original Message-----
From: David Sean Taylor [mailto:david@bluesunrise.com]
Sent: Wednesday, March 31, 2004 4:39 PM
To: Jetspeed Users List
Subject: Re: Hide Categories of Portlets from Groups of Users
On Wednesday, March 31, 2004, at 04:35 PM, Bob Fleischman wrote:
> David:
>
> I modified the code to check for PERMISSION_PERSONIZE and added a new
> security constraint "user-select_admin-all"
>
> If a portlet is marked "user-view_admin-all" they can not select it
> but they
> can view it. If I set it to "user-select_admin_all" they can do both.
>
Nice ....
Did you want to send a patch :-)
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
Re: Hide Categories of Portlets from Groups of Users
Posted by David Sean Taylor <da...@bluesunrise.com>.
On Wednesday, March 31, 2004, at 04:35 PM, Bob Fleischman wrote:
> David:
>
> I modified the code to check for PERMISSION_PERSONIZE and added a new
> security constraint "user-select_admin-all"
>
> If a portlet is marked "user-view_admin-all" they can not select it
> but they
> can view it. If I set it to "user-select_admin_all" they can do both.
>
Nice ....
Did you want to send a patch :-)
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org