You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by Eric Chow <er...@yahoo.com> on 2002/02/20 06:07:46 UTC
Permission not work in 1.3a2
Hi,
When I disabled the "customize" and "personalize" for
some specific users in admin role, those users still
can customize their page. Or I disable the "customize"
permission in the "Security Role Browser" for the role
of "user", it still not work.
Platform: JetSpeed 1.3a2 with (Tomcat4.0.2 + JDK1.4)
in Win98
Best regards,
Eric
=====
==========================================================
Chow Hoi Ka, Eric
Email : eric138@yahoo.com
==========================================================
__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
RE: Permission not work in 1.3a2
Posted by David Sean Taylor <da...@bluesunrise.com>.
> Something like
>
> <security role="user, guest"/>#
>
> or
>
> <security role="user"/>
> <security role="guest"/>
That isn't supported, but it needs to be.
Im going to need that functionality and will put it in eventually,
unless you get to it before me
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
Re: Permission not work in 1.3a2
Posted by Paul Spencer <pa...@apache.org>.
Eric,
The user will need the following permissions: view, minimize, and maximize
See the following thread for more information on how security currently
works.
http://www.mail-archive.com/jetspeed-user%40jakarta.apache.org/msg01868.html
We are working on enhancing the current implementation. Suggestions and
comments are welcome.
Paul Spencer
Eric Chow wrote:
> Thanks for your answer. I have added the <security
> role="user"/> for some Portlet.
>
> But when I disabled all the permissions in the role of
> "user" remaining the "minimize" and "maxmize".
>
> The page just shows "Sorry, you have no permission to
> see this portlet".
>
> If I onlyow the user to "see", "minimize" and
> "maxmize" the portlet, and can't change the layout,
> what permission should I set ?
>
>
> Best regards,
> Eric
>
>
> --- Emmanuel Bardet <em...@bardet.org> wrote:
>
>>Just pop in for a sec, Gus.
>>
>>Can the security entry handles a list ?
>>
>>Something like
>>
>><security role="user, guest"/>#
>>
>>or
>>
>><security role="user"/>
>><security role="guest"/>
>>
>>>-----Original Message-----
>>>From: gus [mailto:gusmail@gmx.net]
>>>Sent: mercredi 20 fevrier 2002 07:56
>>>To: Jetspeed Users List
>>>Subject: Re: Permission not work in 1.3a2
>>>
>>>
>>>Eric Chow schrieb:
>>>
>>>>When I disabled the "customize" and
>>>>
>>"personalize" for
>>
>>>>some specific users in admin role, those users
>>>>
>>still
>>
>>>>can customize their page. Or I disable the
>>>>
>>"customize"
>>
>>>>permission in the "Security Role Browser" for
>>>>
>>the role
>>
>>>>of "user", it still not work.
>>>>
>>>To make the permissions have an effect the
>>>
>>portlets must have a <security
>>
>>>role="rolename"/> entry in the .xreg files.
>>>E.g. you want to disable maximize and minimize on
>>>
>>the
>>
>>>HelloVelocity portlet:
>>>- Disable maximize and minimize permission in role
>>>
>>"user"
>>
>>>- Add the <security ...> entry to the
>>>
>>HelloVelocity entry in the .xreg:
>>
>>> <portlet-entry name="HelloVelocity"
>>>
>>hidden="false" type="ref"
>>
>>> parent="CustomizerVelocity"
>>>
>>application="false">
>>
>>> <security role="user"/>
>>> [...]
>>> </portlet-entry>
>>>
>>>Fur further information refer to
>>>
>>>
> http://www.mail-archive.com/jetspeed-user@jakarta.apache.org/msg01868.html
>
>>>
>>>>Platform: JetSpeed 1.3a2 with (Tomcat4.0.2 +
>>>>
>>JDK1.4)
>>
>>>I recently upgraded to 1.3a3-dev (see "Nightly
>>>
>>build" on the web
>>
>>>page). IMHO
>>>it's more stable and some bugs concerning
>>>
>>customization and security are
>>
>>>fixed.
>>>
>>> gus
>>>
>>>--
>>>To unsubscribe, e-mail:
>>>
>>>
> <ma...@jakarta.apache.org>
>
>>>For additional commands, e-mail:
>>><ma...@jakarta.apache.org>
>>>
>>>
>>
>>
>>--
>>To unsubscribe, e-mail:
>>
>>
> <ma...@jakarta.apache.org>
>
>>For additional commands, e-mail:
>><ma...@jakarta.apache.org>
>>
>
>
> =====
> ==========================================================
> Chow Hoi Ka, Eric
> Email : eric138@yahoo.com
> ==========================================================
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Sports - Coverage of the 2002 Olympic Games
> http://sports.yahoo.com
>
> --
> To unsubscribe, e-mail: <ma...@jakarta.apache.org>
> For additional commands, e-mail: <ma...@jakarta.apache.org>
>
>
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
RE: Permission not work in 1.3a2
Posted by Eric Chow <er...@yahoo.com>.
Thanks for your answer. I have added the <security
role="user"/> for some Portlet.
But when I disabled all the permissions in the role of
"user" remaining the "minimize" and "maxmize".
The page just shows "Sorry, you have no permission to
see this portlet".
If I onlyow the user to "see", "minimize" and
"maxmize" the portlet, and can't change the layout,
what permission should I set ?
Best regards,
Eric
--- Emmanuel Bardet <em...@bardet.org> wrote:
> Just pop in for a sec, Gus.
>
> Can the security entry handles a list ?
>
> Something like
>
> <security role="user, guest"/>#
>
> or
>
> <security role="user"/>
> <security role="guest"/>
>
> > -----Original Message-----
> > From: gus [mailto:gusmail@gmx.net]
> > Sent: mercredi 20 fevrier 2002 07:56
> > To: Jetspeed Users List
> > Subject: Re: Permission not work in 1.3a2
> >
> >
> > Eric Chow schrieb:
> > > When I disabled the "customize" and
> "personalize" for
> > > some specific users in admin role, those users
> still
> > > can customize their page. Or I disable the
> "customize"
> > > permission in the "Security Role Browser" for
> the role
> > > of "user", it still not work.
> >
> > To make the permissions have an effect the
> portlets must have a <security
> > role="rolename"/> entry in the .xreg files.
> > E.g. you want to disable maximize and minimize on
> the
> > HelloVelocity portlet:
> > - Disable maximize and minimize permission in role
> "user"
> > - Add the <security ...> entry to the
> HelloVelocity entry in the .xreg:
> > <portlet-entry name="HelloVelocity"
> hidden="false" type="ref"
> > parent="CustomizerVelocity"
> application="false">
> > <security role="user"/>
> > [...]
> > </portlet-entry>
> >
> > Fur further information refer to
> >
>
http://www.mail-archive.com/jetspeed-user@jakarta.apache.org/msg01868.html
> >
> >
> > > Platform: JetSpeed 1.3a2 with (Tomcat4.0.2 +
> JDK1.4)
> >
> > I recently upgraded to 1.3a3-dev (see "Nightly
> build" on the web
> > page). IMHO
> > it's more stable and some bugs concerning
> customization and security are
> > fixed.
> >
> > gus
> >
> > --
> > To unsubscribe, e-mail:
> >
>
<ma...@jakarta.apache.org>
> > For additional commands, e-mail:
> > <ma...@jakarta.apache.org>
> >
> >
>
>
>
> --
> To unsubscribe, e-mail:
>
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
> <ma...@jakarta.apache.org>
>
=====
==========================================================
Chow Hoi Ka, Eric
Email : eric138@yahoo.com
==========================================================
__________________________________________________
Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
http://sports.yahoo.com
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
RE: Permission not work in 1.3a2
Posted by Emmanuel Bardet <em...@bardet.org>.
Just pop in for a sec, Gus.
Can the security entry handles a list ?
Something like
<security role="user, guest"/>#
or
<security role="user"/>
<security role="guest"/>
> -----Original Message-----
> From: gus [mailto:gusmail@gmx.net]
> Sent: mercredi 20 fevrier 2002 07:56
> To: Jetspeed Users List
> Subject: Re: Permission not work in 1.3a2
>
>
> Eric Chow schrieb:
> > When I disabled the "customize" and "personalize" for
> > some specific users in admin role, those users still
> > can customize their page. Or I disable the "customize"
> > permission in the "Security Role Browser" for the role
> > of "user", it still not work.
>
> To make the permissions have an effect the portlets must have a <security
> role="rolename"/> entry in the .xreg files.
> E.g. you want to disable maximize and minimize on the
> HelloVelocity portlet:
> - Disable maximize and minimize permission in role "user"
> - Add the <security ...> entry to the HelloVelocity entry in the .xreg:
> <portlet-entry name="HelloVelocity" hidden="false" type="ref"
> parent="CustomizerVelocity" application="false">
> <security role="user"/>
> [...]
> </portlet-entry>
>
> Fur further information refer to
> http://www.mail-archive.com/jetspeed-user@jakarta.apache.org/msg01868.html
>
>
> > Platform: JetSpeed 1.3a2 with (Tomcat4.0.2 + JDK1.4)
>
> I recently upgraded to 1.3a3-dev (see "Nightly build" on the web
> page). IMHO
> it's more stable and some bugs concerning customization and security are
> fixed.
>
> gus
>
> --
> To unsubscribe, e-mail:
> <ma...@jakarta.apache.org>
> For additional commands, e-mail:
> <ma...@jakarta.apache.org>
>
>
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
Re: Permission not work in 1.3a2
Posted by gus <gu...@gmx.net>.
Eric Chow schrieb:
> When I disabled the "customize" and "personalize" for
> some specific users in admin role, those users still
> can customize their page. Or I disable the "customize"
> permission in the "Security Role Browser" for the role
> of "user", it still not work.
To make the permissions have an effect the portlets must have a <security
role="rolename"/> entry in the .xreg files.
E.g. you want to disable maximize and minimize on the HelloVelocity portlet:
- Disable maximize and minimize permission in role "user"
- Add the <security ...> entry to the HelloVelocity entry in the .xreg:
<portlet-entry name="HelloVelocity" hidden="false" type="ref"
parent="CustomizerVelocity" application="false">
<security role="user"/>
[...]
</portlet-entry>
Fur further information refer to
http://www.mail-archive.com/jetspeed-user@jakarta.apache.org/msg01868.html
> Platform: JetSpeed 1.3a2 with (Tomcat4.0.2 + JDK1.4)
I recently upgraded to 1.3a3-dev (see "Nightly build" on the web page). IMHO
it's more stable and some bugs concerning customization and security are
fixed.
gus
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>