Portal Page "view" and "viewrecursive" are equivilent. -------------------------------------------------------- Key: JBPORTAL-1474 URL: http://jira.jboss.com/jira/browse/JBPORTAL-1474 Project: JBoss Portal Issue Type: Bug Security Level: Public (Everyone can see) Components: Portal Security Affects Versions: 2.4.1 SP1 Reporter: Andrew Oliver Assigned To: Julien Viet Create a Page, set that page to no unchecked actions and user "view". Add a CMSPortlet instance called whatever you like. Set that instance on the page to no permissions or only admin view. Log in as a plain user. The user can see the portlet if he can see the page even though the page is view and he has no permission to view that particular portlet. Thus it is not clear how you'd secure an individual portlet independent of page security. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira