portals-jetspeed-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michael Gustav Simon <mgsi...@gmail.com>
Subject PorletPermission
Date Fri, 20 Jan 2006 14:27:04 GMT
Hello,
I do not understand the permission for portlets!

If I set a role (ex. admin) to a portlet (ex. Helloworld Portlet Wrapper) in
the "Root Folder >> Jetspeed Administrative Portlets >> Portlet Application
Manager" / "Portlet Application Detail" tab "Portlets" subtab "Security" and
relogin with an user (ex. user), the portlet can selected (portlet: "Portlet
Selector") for in the customization page.

The portlet "Portlet Selector" will filter the portlets with the following
code-snippet.

(PortletSelector.java)
...
if (permissionManager.checkPermission(subject,
  new PortletPermission(portlet.getUniqueName(),
  SecuredResource.VIEW_ACTION, subject )))
{
  list.add(new PortletInfo(uniqueName, portlet.getDisplayNameText(locale),
portlet.getDescriptionText(locale)));
}
...

Why is this portlet selectable?

greets,
mgsimon

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message