[jboss-jira] [JBoss JIRA] Commented: (JBPORTAL-1514) Could not assign selective permissions when securing cms repositories

Sohil Shah (JIRA) jira-events at lists.jboss.org
Thu Jun 28 16:10:57 EDT 2007


    [ http://jira.jboss.com/jira/browse/JBPORTAL-1514?page=comments#action_12367217 ] 
            
Sohil Shah commented on JBPORTAL-1514:
--------------------------------------

Also, by default the CMS Tool is packaged under the "Admin" portal and not in the "Default" portal, so only way to access is to log in as Admin role.

But you can change that by adding the CMS Tool to any other page in your "Default" Portal.

Once you do that, the CMS Tool will allow access based on your Role.

For instance, when you are logged in as "User", You will be able to browse the repository, but you will not have access to "Delete" files etc

> Could not assign selective permissions when securing cms repositories
> ---------------------------------------------------------------------
>
>                 Key: JBPORTAL-1514
>                 URL: http://jira.jboss.com/jira/browse/JBPORTAL-1514
>             Project: JBoss Portal
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Portal CMS
>            Reporter: Rajesh Rajasekaran
>         Assigned To: Julien Viet
>             Fix For: 2.6 Final
>
>
> What i am trying to do here:
> 1.Create a new repository and a new user when logged in as admin.
> 2.Secure the cms repository and assign only read permissions to that user on that repository and block write and manage permissions.
> In step 2, the user is totally blocked access to the repository. he is not able to read the repository.
> 3.I gave read and write permissions but blocked manage permissions.
> In step 3, i was able to read and write to the cms repository and also was able to manage (secure permissions).
> Just wanted to check if this is a valid use case and i am doing it right.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list