[JBoss Portal] - Declarative Security and Portlets
by karink
Hi,
I just would like to discuss an issue about the portlet specification and security.
Reading the portlet spec again and again there is one issue that I do not really understand:
The chapter "PLT.20.2 Roles" states:
anonymous wrote : The Portlet Specification shares the same definition as roles of the Servlet Specification
| 2.3, SRV.12.4 Section.
Reading the servlet spec it states:
anonymous wrote : A servlet container enforces declarative or programmatic security for the principal associated with an incoming request based on the security attributes of the principal.
So what is meant by this:
Should the portlet container secure access to a portlet by means of declarative security.
How can this be done? Is this a configuration in the web.xml file.
The portlet spec also stated "PLT.3 Relationship with the Servlet Specification"
anonymous wrote : Portlets are not directly bound to a URL
So how can there be a security-constraint in the web.xml without defined url.
Reading JBoss doc I got the impression that securing a portlet is
a portlet container related task (and is be done in the admin portlet,
or in jboss portal proprietary deployment descriptor).
Than I come to a next point. When accessing a portlet from remote via
WSRP how can than the portlet be secured. Currently I do not see a declarative mean.
If no declarative security can be used, is it really meant, that a portlet developer should always use programmatic security (isUserInRole)
Regards Karin
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4020559#4020559
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4020559
19Â years, 2Â months
[JBoss Eclipse IDE (users)] - could not define a configuration
by *alexandre*
Hi,
I juste install the last version of JBoss IDE for my version of eclipse (Version: 3.2.2)
And when I create an EJB 3.0 and want to create a configuration for Jboss 4.0.x -> New I got and error.
Here is the log
anonymous wrote :
| ENTRY org.eclipse.jface 4 2 2007-02-22 14:30:04.687
| !MESSAGE Problems occurred when invoking code from plug-in: "org.eclipse.jface".
| !STACK 0
| java.lang.NoClassDefFoundError: org/eclipse/jdt/internal/debug/ui/launcher/JavaLaunchConfigurationTab
| at java.lang.ClassLoader.defineClass1(Native Method)
| at java.lang.ClassLoader.defineClass(Unknown Source)
| at org.eclipse.osgi.internal.baseadaptor.DefaultClassLoader.defineClass(DefaultClassLoader.java:161)
| at org.eclipse.osgi.baseadaptor.loader.ClasspathManager.defineClass(ClasspathManager.java:501)
| at org.eclipse.osgi.baseadaptor.loader.ClasspathManager.findClassImpl(ClasspathManager
|
thx in advance for your advice.
Regards
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4020556#4020556
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4020556
19Â years, 2Â months