portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 25538] - How to entirely block access to the customizer
Date Fri, 16 Jan 2004 12:50:35 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25538>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25538

How to entirely block access to the customizer

paul-apache@mansfield.co.uk changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|Minor                       |Major



------- Additional Comments From paul-apache@mansfield.co.uk  2004-01-16 12:50 -------
Ah, yes indeedy!
I started with a fresh install of jetspeed webapp from the original downloaded 
war, and indeed, I couldn't customise the anon user.
I then changed to use role-based profiles, and now I find I can customise any 
user when not logged in. I checked that the anon user's role is still only 
"guest". Here's the diffs

diff JetspeedResources.properties JetspeedResources.properties.orig
1,2d0
< # search for PADM to find my changes... PADM
< #
426,428c424
< # PADM-ROLE
< services.Profiler.newuser.template=
< #services.Profiler.newuser.template=turbine
---
> services.Profiler.newuser.template=turbine
431,433c427
< # PADM-ROLE
< services.Profiler.newuser.media_types=html
< #services.Profiler.newuser.media_types=html,wml
---
> services.Profiler.newuser.media_types=html,wml
455,457c449
< # PADM-ROLE
< services.Profiler.rolemerge=true
< #services.Profiler.rolemerge=false
---
> services.Profiler.rolemerge=false
513d504

If this has already been fixed, I apologise, perhaps there's a fix in the CVS 
archives, or maybe someone has a patch that's yet to be tested.

thanks very much for your time,
Paul

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org


Mime
View raw message