portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Sean Taylor (JIRA)" <jetspeed-...@portals.apache.org>
Subject [jira] Updated: (JS1-279) [FIX] Default security constraint can override registry-level portlet security
Date Mon, 28 Nov 2005 16:35:38 GMT
     [ http://issues.apache.org/jira/browse/JS1-279?page=all ]

David Sean Taylor updated JS1-279:
----------------------------------

    Bugzilla Id:   (was: 18885)
    Description: 
The default user security ref is 'owner-only' so if registry-level security for 
a portlet is more restrictive, 'owner-only' would override it. I still think 
that default security ref is a useful feature. My vote would be to not set 
default security ref if registry-level constraint exists.

  was:
The default user security ref is 'owner-only' so if registry-level security for 
a portlet is more restrictive, 'owner-only' would override it. I still think 
that default security ref is a useful feature. My vote would be to not set 
default security ref if registry-level constraint exists.

    Environment: 
Operating System: Other
Platform: Other

  was:
Operating System: Other
Platform: Other

      Assign To:     (was: Scott T weaver)
       Priority: Blocker

> [FIX] Default security constraint can override registry-level portlet security
> ------------------------------------------------------------------------------
>
>          Key: JS1-279
>          URL: http://issues.apache.org/jira/browse/JS1-279
>      Project: Jetspeed
>         Type: Bug
>   Components: Security
>     Versions: 1.4b4-dev / CVS
>  Environment: Operating System: Other
> Platform: Other
>     Reporter: Mark Orciuch
>     Priority: Blocker

>
> The default user security ref is 'owner-only' so if registry-level security for 
> a portlet is more restrictive, 'owner-only' would override it. I still think 
> that default security ref is a useful feature. My vote would be to not set 
> default security ref if registry-level constraint exists.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message