[jboss-user] [JBoss Portal] - security constraint template/dashboard
cpage
do-not-reply at jboss.com
Thu Jul 19 10:34:20 EDT 2007
hi,
the template portal is set with 4 pages.
one of them has a security constraint for the role Admin.
but, when the user without the role Admin go to his dashboard (loaded from the template portal), he can see the admin page/tab.
i take a look at tabs.jsp, and it seems that tabs are loaded without any notion of security.
in JBP_OBJECT_NODE_** i can see that template.adminPage node is well secured.
but, dashboard.anyUser.adminPage are not.
thanks for help
regards.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4065829#4065829
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4065829
More information about the jboss-user
mailing list