[JBoss Portal] - Re: Portal 2.6.6 Login Dialog Prboem in IE 6 and IE 7
by Tommy_T
When this was fixed for 2.6.6, it was propably not updated in the 2.7.x-trunk.
The login screen is not displayed correctly in Internet Explorer for 2.7.x.
The proposed solution below have been tested on 2.7.1 and renders the login screen properly.
Button values and label data could be replaced with strings from a resource bundle instead (as default).
Edit the div.login-container div.login-content css property in
jboss-portal.sar\portal-core.war\css\login.css
div.login-container div.login-content {
| font-family: Verdana, Arial, Helvetica, Sans-Serif, sans-serif;
| font-size: 11px;
| width: 255px;
| border: 1px solid #CFCFCF;
| background-color:white;
| padding: 0px 0 0 0;
| text-align: right;
| }
Set appropriate width in
jboss-portal.sar\portal-server.war\login.jsp
<form method="post" action="<%= response.encodeURL("j_security_check") %>" name="loginform" id="loginForm"
| target="_parent">
| <div class="form-field">
| <label for="j_username">Username</label>
| <input type="text" style="width:155px;" name="j_username" id="j_username" value=""/>
| </div>
| <div class="form-field bottom-field">
| <label for="j_password">Password</label>
| <input type="password" style="width:155px;" name="j_password" id="j_password" value=""/>
| </div>
| <input style="width:75px;<%=(request.getParameter("loginheight") != null ? "" : "display:none")%>;"
| type="button" name="cancel" value="Cancel" class="cancel-button" onclick="window.parent.hideContentModal('login-modal');"/>
| <input style="width:75px;<%=(request.getParameter("loginheight") != null ? "" : "right:10px")%>;"
| type="submit" name="login" value="Login" class="login-button"/>
| </form>
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4211705#4211705
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4211705
17 years, 2 months
[Security & JAAS/JBoss] - Re: Calling protected ejb method from anoter
by drfranknfurter
It seems I spoke a bit hastily.
Although initial tests indicated that this should work, I can't get it to work. I think I misunderstood.
Here is my scenario:
Web tier calls EJB1 method which is protected. The user has the required role and all is well. EJB1 calls EJB2 which requires a different role. So I annotated EJB1 with @RunAs specifying the role required by EJB2.
Unfortunately @RunAs only allows 1 role. This is not sufficient if EJB1 calls various other EJBs protected with various roles. What I tried to do to get around this was create a role, not ever assigned to a user, for this purpose specifically.
@RunAs would always use this role and methods that are called from the Web tier AND the EJB tier gets this role added to its @RolesAllowed (in addition to the existing role required).
Sounded like a good idea at the time... except for that it does not work.
Even if the user has the original role required for the method call it fails. Which makes sense since the only role used to call the EJB is now the one specified with @RunAs, what I don't get is why is it not matching? I have the @RunAs role added to the @RolesAllowed?
View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4211699#4211699
Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4211699
17 years, 2 months