portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ate Douma <...@douma.nu>
Subject Re: svn commit: r1178678 - in /portals/jetspeed-2: applications/j2-admin/trunk/src/main/webapp/WEB-INF/ portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/ portal/trunk/applications/jetspeed/src/main/weba
Date Tue, 04 Oct 2011 11:33:03 GMT
On 10/04/2011 09:22 AM, David Taylor wrote:
>> +<security-constraints>
>> +<security-constraints-ref>admin</security-constraints-ref>
>> +</security-constraints>
>
> Perhaps when the page is copied or moved with the Site Manager.....
> that could be a security hole, although you had to be an Admin to move
> or copy the page to begin with.

Correct. If a page already is restricted to admin view only, only a admin user 
will be able to modify/copy/move them through the Site Manager, so this won't be 
a security hole.

Regardless, these extra psml level constraints are only a convenience 
measurement to prevent 'Access Denied' messages to be shown to users not allowed 
to *execute* the portlet.
Even without these psml constraints on page or folder level these portlets are 
'locked down', so there is no possible security hole anyway.


>
> On Tue, Oct 4, 2011 at 12:17 AM, David Taylor<davidseantaylor@gmail.com>  wrote:
>> Ate,
>>
>> Why are you adding all of these security-constraints-refs to the pages
>> if the folder already has the exact same security-constraints-ref? The
>> security constraint is inherited from the folder and the page
>> constraints are unnecessary
>>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>
>> Thanks,
>>
>> --
>> David
>>
>> On Mon, Oct 3, 2011 at 9:10 PM,<ate@apache.org>  wrote:
>>> Author: ate
>>> Date: Tue Oct  4 04:10:42 2011
>>> New Revision: 1178678
>>>
>>> URL: http://svn.apache.org/viewvc?rev=1178678&view=rev
>>> Log:
>>> JS2-1263: Hardening j2-admin security by restricting access to hot deployment
and portlet metadata features to admin role only
>>> Both portlet render time enforcement of admin constraints and related psml level
admin constraints (hiding portlets/pages instead of showing 'Access Denied')  added
>>> See also JS2-1262 for more detail concerning individual portlet render time constraints
checking configuration.
>>>
>>> Portlets/pages 'locked down' this way:
>>> - PAM (Portlet Application Manager)
>>> - RPAD (Remote Portlet Application Deployer)
>>> - Permissions&  Constraints management
>>> - PortalDataSerializer (Import/Export)
>>>
>>> Modified:
>>>     portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
>>>     portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
>>>
>>> Modified: portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
(original)
>>> +++ portals/jetspeed-2/applications/j2-admin/trunk/src/main/webapp/WEB-INF/jetspeed-portlet.xml
Tue Oct  4 04:10:42 2011
>>> @@ -157,6 +157,48 @@
>>>      <js:metadata name="selector.conditional.role">*</js:metadata>
>>>    </portlet>
>>>
>>> +<!-- Render time enforced security constaints (admin) -->
>>> +
>>> +<!-- PAM portlets -->
>>> +<portlet>
>>> +<portlet-name>RegistryApplicationsList</portlet-name>
>>> +<js:metadata name="render-time.security-constraints">true</js:metadata>
>>> +</portlet>
>>> +<portlet>
>>> +<portlet-name>PortletDetailsManager</portlet-name>
>>> +<js:metadata name="render-time.security-constraints">true</js:metadata>
>>> +</portlet>
>>> +<portlet>
>>> +<portlet-name>ApplicationDetails</portlet-name>
>>> +<js:metadata name="render-time.security-constraints">true</js:metadata>
>>> +</portlet>
>>> +<portlet>
>>> +<portlet-name>PortletCloneManager</portlet-name>
>>> +<js:metadata name="render-time.security-constraints">true</js:metadata>
>>> +</portlet>
>>> +
>>> +<!-- Permissions and Constraints -->
>>> +<portlet>
>>> +<portlet-name>SecurityPermissionsPortlet</portlet-name>
>>> +<js:metadata name="render-time.security-constraints">true</js:metadata>
>>> +</portlet>
>>> +<portlet>
>>> +<portlet-name>SecurityConstraintsPortlet</portlet-name>
>>> +<js:metadata name="render-time.security-constraints">true</js:metadata>
>>> +</portlet>
>>> +
>>> +<!-- RPAD -->
>>> +<portlet>
>>> +<portlet-name>RPADPortlet</portlet-name>
>>> +<js:metadata name="render-time.security-constraints">true</js:metadata>
>>> +</portlet>
>>> +
>>> +<!-- Serializer -->
>>> +<portlet>
>>> +<portlet-name>PortalDataSerializer</portlet-name>
>>> +<js:metadata name="render-time.security-constraints">true</js:metadata>
>>> +</portlet>
>>> +
>>>    <js:services>
>>>      <js:service name='ApplicationServerManager' />
>>>      <js:service name='DeploymentManager' />
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/pam.psml
Tue Oct  4 04:10:42 2011
>>> @@ -43,4 +43,7 @@ limitations under the License.
>>>        <property layout="TwoColumns" name="column" value="1" />
>>>      </fragment>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/rpad.psml
Tue Oct  4 04:10:42 2011
>>> @@ -26,5 +26,7 @@ limitations under the License.
>>>        <property name="column" value="0" layout="OneColumn"/>
>>>      </fragment>
>>>    </fragment>
>>> -
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/portal-admin/serializer.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,5 +24,7 @@ limitations under the License.
>>>    <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
>>>    </fragment>
>>> -
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-constraints.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,4 +24,7 @@ limitations under the License.
>>>    <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet"
/>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-pages/Administrative/security/security-permissions.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,4 +24,7 @@ limitations under the License.
>>>    <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet"
/>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/pam.psml
Tue Oct  4 04:10:42 2011
>>> @@ -43,4 +43,7 @@ limitations under the License.
>>>        <property layout="TwoColumns" name="column" value="1" />
>>>      </fragment>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/rpad.psml
Tue Oct  4 04:10:42 2011
>>> @@ -26,5 +26,7 @@ limitations under the License.
>>>        <property name="column" value="0" layout="OneColumn"/>
>>>      </fragment>
>>>    </fragment>
>>> -
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Administrative/serializer.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,5 +24,7 @@ limitations under the License.
>>>    <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
>>>    </fragment>
>>> -
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-constraints.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,4 +24,7 @@ limitations under the License.
>>>    <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet"
/>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/Security/security-permissions.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,4 +24,7 @@ limitations under the License.
>>>    <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet"
/>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/min-ui-pages/_user/admin/default-page.psml
Tue Oct  4 04:10:42 2011
>>> @@ -28,6 +28,9 @@ limitations under the License.
>>>      <fragment id="admin-db-1010" type="portlet" name="j2-admin::PortalDataSerializer">
>>>        <property name="row" value="0" />
>>>        <property name="column" value="1" />
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>      </fragment>
>>>     </fragment>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/pam.psml
Tue Oct  4 04:10:42 2011
>>> @@ -43,4 +43,7 @@ limitations under the License.
>>>        <property layout="TwoColumns" name="column" value="1" />
>>>      </fragment>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/rpad.psml
Tue Oct  4 04:10:42 2011
>>> @@ -27,5 +27,7 @@ limitations under the License.
>>>        <property name="column" value="0" layout="OneColumn"/>
>>>      </fragment>
>>>    </fragment>
>>> -
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-constraints.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,4 +24,7 @@ limitations under the License.
>>>    <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet"
/>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/security-permissions.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,4 +24,7 @@ limitations under the License.
>>>    <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet"
/>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/pages/Administrative/serializer.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,5 +24,7 @@ limitations under the License.
>>>    <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
>>>    </fragment>
>>> -
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/pam.psml
Tue Oct  4 04:10:42 2011
>>> @@ -43,4 +43,7 @@ limitations under the License.
>>>        <property layout="TwoColumns" name="column" value="1" />
>>>      </fragment>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/rpad.psml
Tue Oct  4 04:10:42 2011
>>> @@ -26,5 +26,7 @@ limitations under the License.
>>>        <property name="column" value="0" layout="OneColumn"/>
>>>      </fragment>
>>>    </fragment>
>>> -
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/Administrative/serializer.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,5 +24,7 @@ limitations under the License.
>>>    <fragment id="export-layout-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="export-2" type="portlet" name="j2-admin::PortalDataSerializer"/>
>>>    </fragment>
>>> -
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-constraints.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,4 +24,7 @@ limitations under the License.
>>>    <fragment id="m-security-constraints-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="m-security-constraints-2" type="portlet" name="j2-admin::SecurityConstraintsPortlet"
/>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>> Modified: portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
>>> URL: http://svn.apache.org/viewvc/portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml?rev=1178678&r1=1178677&r2=1178678&view=diff
>>> ==============================================================================
>>> --- portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
(original)
>>> +++ portals/jetspeed-2/portal/trunk/applications/jetspeed/src/main/webapp/WEB-INF/ui-pages/security/security-permissions.psml
Tue Oct  4 04:10:42 2011
>>> @@ -24,4 +24,7 @@ limitations under the License.
>>>    <fragment id="m-security-policy-1" type="layout" name="jetspeed-layouts::VelocityOneColumn">
>>>      <fragment id="m-security-policy-2" type="portlet" name="j2-admin::SecurityPermissionsPortlet"
/>
>>>    </fragment>
>>> +<security-constraints>
>>> +<security-constraints-ref>admin</security-constraints-ref>
>>> +</security-constraints>
>>>   </page>
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
>>> For additional commands, e-mail: jetspeed-dev-help@portals.apache.org
>>>
>>>
>>
>>
>>
>> --
>> David
>>
>
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org


Mime
View raw message