portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From David Taylor <davidseantay...@gmail.com>
Subject Re: svn commit: r1178678 - in /portals/jetspeed-2: applications/j2-admin/trunk/src/main/webapp/WEB-INF/ portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/ portal/trunk/applications/jetspeed/src/main/weba
Date Tue, 04 Oct 2011 07:22:34 GMT
> +  <security-constraints>
> +    <security-constraints-ref>admin</security-constraints-ref>
> +  </security-constraints>

Perhaps when the page is copied or moved with the Site Manager.....
that could be a security hole, although you had to be an Admin to move
or copy the page to begin with.

On Tue, Oct 4, 2011 at 12:17 AM, David Taylor <davidseantaylor@gmail.com> wrote:
> Ate,
>
> Why are you adding all of these security-constraints-refs to the pages
> if the folder already has the exact same security-constraints-ref? The
> security constraint is inherited from the folder and the page
> constraints are unnecessary
>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>
> Thanks,
>
> --
> David
>
> On Mon, Oct 3, 2011 at 9:10 PM,  <ate@apache.org> wrote:
>> Author: ate
>> Date: Tue Oct  4 04:10:42 2011
>> New Revision: 1178678
>>
>> URL: http://svn.apache.org/viewvc?rev=1178678&view=rev
>> Log:
>> JS2-1263: Hardening j2-admin security by restricting access to hot deployment and
portlet metadata features to admin role only
>> Both portlet render time enforcement of admin constraints and related psml level
admin constraints (hiding portlets/pages instead of showing 'Access Denied')  added
>> See also JS2-1262 for more detail concerning individual portlet render time constraints
checking configuration.
>>
>> Portlets/pages 'locked down' this way:
>> - PAM (Portlet Application Manager)
>> - RPAD (Remote Portlet Application Deployer)
>> - Permissions & Constraints management
>> - PortalDataSerializer (Import/Export)
>>
>> Modified:
>>    portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
>>    portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
>>
>> Modified: portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
(original)
>> +++ portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
Tue Oct  4 04:10:42 2011
>> @@ -157,6 +157,48 @@
>>     <js:metadata name="selector.conditional.role">*</js:metadata>
>>   </portlet>
>>
>> +  <!-- Render time enforced security constaints (admin) -->
>> +
>> +  <!-- PAM portlets -->
>> +  <portlet>
>> +    <portlet-name>RegistryApplicationsList</portlet-name>
>> +    <js:metadata name="render-time.security-constraints">true</js:metadata>
>> +  </portlet>
>> +  <portlet>
>> +    <portlet-name>PortletDetailsManager</portlet-name>
>> +    <js:metadata name="render-time.security-constraints">true</js:metadata>
>> +  </portlet>
>> +  <portlet>
>> +    <portlet-name>ApplicationDetails</portlet-name>
>> +    <js:metadata name="render-time.security-constraints">true</js:metadata>
>> +  </portlet>
>> +  <portlet>
>> +    <portlet-name>PortletCloneManager</portlet-name>
>> +    <js:metadata name="render-time.security-constraints">true</js:metadata>
>> +  </portlet>
>> +
>> +  <!-- Permissions and Constraints -->
>> +  <portlet>
>> +    <portlet-name>SecurityPermissionsPortlet</portlet-name>
>> +    <js:metadata name="render-time.security-constraints">true</js:metadata>
>> +  </portlet>
>> +  <portlet>
>> +    <portlet-name>SecurityConstraintsPortlet</portlet-name>
>> +    <js:metadata name="render-time.security-constraints">true</js:metadata>
>> +  </portlet>
>> +
>> +  <!-- RPAD -->
>> +  <portlet>
>> +    <portlet-name>RPADPortlet</portlet-name>
>> +    <js:metadata name="render-time.security-constraints">true</js:metadata>
>> +  </portlet>
>> +
>> +  <!-- Serializer -->
>> +  <portlet>
>> +    <portlet-name>PortalDataSerializer</portlet-name>
>> +    <js:metadata name="render-time.security-constraints">true</js:metadata>
>> +  </portlet>
>> +
>>   <js:services>
>>     <js:service name='ApplicationServerManager' />
>>     <js:service name='DeploymentManager' />
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
Tue Oct  4 04:10:42 2011
>> @@ -43,4 +43,7 @@ limitations under the License.
>>       <property layout="TwoColumns" name="column" value="1" />
>>     </fragment>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
Tue Oct  4 04:10:42 2011
>> @@ -26,5 +26,7 @@ limitations under the License.
>>       <property name="column" value="0" layout="OneColumn"/>
>>     </fragment>
>>   </fragment>
>> -
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,5 +24,7 @@ limitations under the License.
>>   <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
>>   </fragment>
>> -
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,4 +24,7 @@ limitations under the License.
>>   <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet"
/>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,4 +24,7 @@ limitations under the License.
>>   <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet"
/>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
Tue Oct  4 04:10:42 2011
>> @@ -43,4 +43,7 @@ limitations under the License.
>>       <property layout="TwoColumns" name="column" value="1" />
>>     </fragment>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
Tue Oct  4 04:10:42 2011
>> @@ -26,5 +26,7 @@ limitations under the License.
>>       <property name="column" value="0" layout="OneColumn"/>
>>     </fragment>
>>   </fragment>
>> -
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,5 +24,7 @@ limitations under the License.
>>   <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
>>   </fragment>
>> -
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,4 +24,7 @@ limitations under the License.
>>   <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet"
/>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,4 +24,7 @@ limitations under the License.
>>   <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet"
/>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
Tue Oct  4 04:10:42 2011
>> @@ -28,6 +28,9 @@ limitations under the License.
>>     <fragment id="admin-db-1010" type="portlet" name="j2-admin::PortalDataSerializer">
>>       <property name="row" value="0" />
>>       <property name="column" value="1" />
>> +      <security-constraints>
>> +        <security-constraints-ref>admin</security-constraints-ref>
>> +      </security-constraints>
>>     </fragment>
>>    </fragment>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
Tue Oct  4 04:10:42 2011
>> @@ -43,4 +43,7 @@ limitations under the License.
>>       <property layout="TwoColumns" name="column" value="1" />
>>     </fragment>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
Tue Oct  4 04:10:42 2011
>> @@ -27,5 +27,7 @@ limitations under the License.
>>       <property name="column" value="0" layout="OneColumn"/>
>>     </fragment>
>>   </fragment>
>> -
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,4 +24,7 @@ limitations under the License.
>>   <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet"
/>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,4 +24,7 @@ limitations under the License.
>>   <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet"
/>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,5 +24,7 @@ limitations under the License.
>>   <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
>>   </fragment>
>> -
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
Tue Oct  4 04:10:42 2011
>> @@ -43,4 +43,7 @@ limitations under the License.
>>       <property layout="TwoColumns" name="column" value="1" />
>>     </fragment>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
Tue Oct  4 04:10:42 2011
>> @@ -26,5 +26,7 @@ limitations under the License.
>>       <property name="column" value="0" layout="OneColumn"/>
>>     </fragment>
>>   </fragment>
>> -
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,5 +24,7 @@ limitations under the License.
>>   <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
>>   </fragment>
>> -
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,4 +24,7 @@ limitations under the License.
>>   <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet"
/>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>> ==============================================================================
>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
(original)
>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
Tue Oct  4 04:10:42 2011
>> @@ -24,4 +24,7 @@ limitations under the License.
>>   <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>     <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet"
/>
>>   </fragment>
>> +  <security-constraints>
>> +    <security-constraints-ref>admin</security-constraints-ref>
>> +  </security-constraints>
>>  </page>
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
>> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
>>
>>
>
>
>
> --
> David
>



-- 
David

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message