DO NOT REPLY [Bug 25538] New: - How to entirely block access to the customizer

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25538>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25538

How to entirely block access to the customizer

           Summary: How to entirely block access to the customizer
           Product: Jetspeed
           Version: 1.4
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Minor
          Priority: Other
         Component: Customizer
        AssignedTo: jetspeed-dev@jakarta.apache.org
        ReportedBy: paul-apache@mansfield.co.uk


Hi,
sorry that this isn't totally a bug, but...

I would like to know how to block access to the customiser; I can remove the 
"Customize: HTML WML" from the web page, but if I know the URL to customise the 
user's portal, I can simply enter it directly... 
e.g. http://localhost/jetspeed/portal/media-type/html/user/anon/page/default.
psml?action=controls.Customize&reset=on

This means that I can change the look and feel for the anonymous user.

I can't find out where in the documentation it says how to block this.. I have 
modified all sorts of things in the conf/admin.xreg file, even trying to break 
the customiser altogether to see how it works.

I'm probably being dumb, but am desperate for help. And maybe an addition to the 
FAQ for other equal idiots would be possible!

thanks for looking kindly on idiot user.
Paul

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org