portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 22024] New: - [FIX] Current portletFactoryService doesn't check for PortletEntry security in registry
Date Thu, 31 Jul 2003 15:34:33 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22024>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22024

[FIX] Current portletFactoryService doesn't check for PortletEntry security in registry

           Summary: [FIX] Current portletFactoryService doesn't check for
                    PortletEntry security in registry
           Product: Jetspeed
           Version: 1.4b5-dev / CVS
          Platform: All
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: Security
        AssignedTo: jetspeed-dev@jakarta.apache.org
        ReportedBy: apernoud@sopragroup.com


Line 401 :
//pc.setSecurityRef(portletEntry.getSecurityRef());
pc.setSecurityRef(getSecurityReference(null, portletEntry));

the getSecurityRef doesn't use the portletEntry parameter so if the psml 
doesn't have any security ref, then jetspeed ignores the one defined at 
registry and uses the default one.

Additional comment from Mark :

The 2nd parameter is never used (I don't know why it's there). The problem
is that we need to pass psml 'entry' to getPortletConfig. Can you open a
Bugzilla bug for this or do you want me to ?

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org


Mime
View raw message