Portlet window security is ignored - you must secure portlets at the instance level. Then
if a user has view access to a page but does not have view access to a portlet instance
whose window is on that page, that portlet window does not show up.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4124618#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...