Eliminate edit button

[Pham Tuan Minh <ph...@yahoo.com>]

Hi all,
When user login the portal, we see an edit button on the top and right hand. How to eliminate it.
Please, help me.
Thanks.
		
---------------------------------
 Yahoo! DSL Something to write home about. Just $16.99/mo. or less

Re: *SPAM* Eliminate edit button

[Jouni Rajala <jo...@systeemiratkaisu.fi>]

Pham Tuan Minh kirjoitti:

>Hi all,
>When user login the portal, we see an edit button on the top and right hand. How to eliminate it.
>Please, help me.
>Thanks.
>		
>---------------------------------
> Yahoo! DSL Something to write home about. Just $16.99/mo. or less
>  
>
It is because jetspeed creates customizable 'home page' for each 
registered user by default and user
has rights to modify this page.

User can also add any portlet to that page including portlets for 
administration which is very bad IMHO.
So by default jetspeed allows new registered user to add user 
administration portlets on his page and
reset admin passwords for example.

Remove files in WEB-INF/pages/_user/template but leave the directory 
there, because
otherwise registering to system will fail. This way user don't get the 
customizable page at all and
he can't edit it or add new portlets to that page. System will still 
create empty folder for each
user under WEB-INF/pages/_user but it should be empty.

This is just workaround and not actual solution to problem. There should 
be option for disable
this feature entirely and also some system to limit access to 
individiual portlets and portlet applications
so that those can't be added to page.

--
Jouni Rajala


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-user-help@portals.apache.org