define roles for portlet

[Frank Otto <ot...@delta-barth.de>]

Hi,

I want to define the needed roles for a portlet. The portlets should not 
be show, if the user has not the defined role for this portlet.

How can I do this?


kind regards,

Frank


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org

Re: define roles for portlet

[Frank Otto <ot...@delta-barth.de>]

Now, I have defined in jetspeed-portlet.xml the 
js:security-constraint-ref and the definition of this contraint in 
page.security.


   <portlet>
     <portlet-name>MyPortlet</portlet-name>
     <js:security-constraint-ref>ROLE_X</js:security-constraint-ref>
   </portlet>

  <security-constraints-def name="ROLE_X">
     <security-constraint>
       <roles>ROLE_X</roles>
       <permissions>view,edit</permissions>
     </security-constraint>
   </security-constraints-def>

The portlet selector and the ajaxapi check the constraint and the 
portlet can't not be select. But If I have the portlet on a page and set 
the security contraint after this, the portlets can be used normal.

How can I check the security contraint in my portlet?


kind regards,

Frank

Frank Otto schrieb:
> Hi,
> 
> I want to define the needed roles for a portlet. The portlets should not 
> be show, if the user has not the defined role for this portlet.
> 
> How can I do this?
> 
> 
> kind regards,
> 
> Frank
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
> For additional commands, e-mail: jetspeed-user-help@portals.apache.org
> 



---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org