portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Randy Watler (JIRA)" <jetspeed-...@portals.apache.org>
Subject [jira] Resolved: (JS2-235) Cleanup PageManager to enforce Page/Folder security symmetrically
Date Tue, 19 Jul 2005 05:32:45 GMT
     [ http://issues.apache.org/jira/browse/JS2-235?page=all ]
Randy Watler resolved JS2-235:

    Resolution: Fixed

Corrected in page manager component as part of JS2-69 portal-site component implementation.

> Cleanup PageManager to enforce Page/Folder security symmetrically
> -----------------------------------------------------------------
>          Key: JS2-235
>          URL: http://issues.apache.org/jira/browse/JS2-235
>      Project: Jetspeed 2
>         Type: Task
>     Versions: 2.0-M3
>     Reporter: Randy Watler
>     Assignee: Randy Watler
>     Priority: Minor
>      Fix For: 2.0-M4

> PageManager and related implementations do not enforce Page/Folder security constraints/permissions
consistantly across all APIs. PageManager.getFolder() and PageManager.newPage() probably need
to restrict VIEW and EDIT access assuming an end user is attempting to perform these operations
as part of a site management/customization process.
> Will need to review site admin portlets to ensure that tightened APIs do not hinder operation.

This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
For more information on JIRA, see:

To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org

View raw message