You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by Jouni Rajala <jo...@systeemiratkaisu.fi> on 2005/12/29 09:30:27 UTC
Re: *SPAM* Eliminate edit button
Pham Tuan Minh kirjoitti:
>Hi all,
>When user login the portal, we see an edit button on the top and right hand. How to eliminate it.
>Please, help me.
>Thanks.
>
>---------------------------------
> Yahoo! DSL Something to write home about. Just $16.99/mo. or less
>
>
It is because jetspeed creates customizable 'home page' for each
registered user by default and user
has rights to modify this page.
User can also add any portlet to that page including portlets for
administration which is very bad IMHO.
So by default jetspeed allows new registered user to add user
administration portlets on his page and
reset admin passwords for example.
Remove files in WEB-INF/pages/_user/template but leave the directory
there, because
otherwise registering to system will fail. This way user don't get the
customizable page at all and
he can't edit it or add new portlets to that page. System will still
create empty folder for each
user under WEB-INF/pages/_user but it should be empty.
This is just workaround and not actual solution to problem. There should
be option for disable
this feature entirely and also some system to limit access to
individiual portlets and portlet applications
so that those can't be added to page.
--
Jouni Rajala
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org