portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Randy Watler (JIRA)" <jetspeed-...@jakarta.apache.org>
Subject [jira] Created: (JS2-235) Cleanup PageManager to enforce Page/Folder security symmetrically
Date Thu, 21 Apr 2005 18:16:23 GMT
Cleanup PageManager to enforce Page/Folder security symmetrically

         Key: JS2-235
         URL: http://issues.apache.org/jira/browse/JS2-235
     Project: Jetspeed 2
        Type: Task
    Versions: 2.0-M3    
    Reporter: Randy Watler
 Assigned to: Randy Watler 
    Priority: Minor
     Fix For: 2.0-M3

PageManager and related implementations do not enforce Page/Folder security constraints/permissions
consistantly across all APIs. PageManager.getFolder() and PageManager.newPage() probably need
to restrict VIEW and EDIT access assuming an end user is attempting to perform these operations
as part of a site management/customization process.

Will need to review site admin portlets to ensure that tightened APIs do not hinder operation.

This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
For more information on JIRA, see:

To unsubscribe, e-mail: jetspeed-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-dev-help@jakarta.apache.org

View raw message