portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mark Orciuch" <mark_orci...@ngsltd.com>
Subject RE: [Proposal] Lucene Search Service
Date Fri, 23 May 2003 17:32:46 GMT

> See below, but lets keep the "indexing process", i,e, the SearchService,
> separate from the "walk through the registry", i.e. "PortletSearch"
> portlet mentioned below.

OK, your point is well taken.

> >However, one aspect if indexing portal content that bothers me
> is security.
> >So you index every .html file in the portal (just as an
> example). Each .html
> >file is "wrapped" as a portlet and can have access restrictions.
> How do you
> >filter out these from the search results based on the user access rights?
> >
> >
> Who is "you" in "index every .html file in the portal?"  Document must
> be added to the index, via the SearchService, by another portlet,
> service, or external application.  The "SearchService" is not adding
> "index every .html file in the portal"

No need to get "anal", I was using a hypothetical example to illustrate my
point ;-)

> >It would be nice to give the user a search result containing
> links to either
> >preview found portlets and/or add them to current pane (or something like
> >that).
> >
> >
> How about the Registry services add each portlet to the index with the
> following fields:
>     SecurityRef = the portlet's security ref
>     Catalog = PORTLET_ENTRY
> The  "PortletSearch" portlet will append "+Catalog:PORTLET_ENTRY" the
> query.  It would then test each portlet to against the user's security.
>  If the user is allowed to view the portlet, then it will be displayed
> to the user.   In short the"PortletSearch"  portlet with the
> SearchServices is responsible for security.  Also "PortletSearch"
>  portlet will format the "preview" link.

That sounds like it will satisfy the security requirement.

Best regards,

Mark Orciuch - morciuch@apache.org
Jakarta Jetspeed - Enterprise Portal in Java

To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org

View raw message