[jboss-user] [JBoss Portal] - Re: Newbie: Simple security question

[mchan_98]

Look at the user doc

Basically, in your WEB-INF\xxxx-object.xml file  that define your page, you need to add

         <security-constraint>
            <policy-permission>
               <role-name>Admin</role-name>
               <action-name>viewrecursive</action-name>
            </policy-permission>
         </security-constraint>
in the deployments->deployment->page tag

In practice, there's a number of things that can screw you up:
1) you need to change your if-exists definition to overwrite from keep in your deployment->deployment application
2) Your new role may not be defined properly (I don't remember correctly, but it has something to do with the role name shown in your portal admin page should not be the one you use in your xxx-object.xml file)  I would suggest using Admin(the built in one) as a role to test first.

Hope this help.

Michael

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4028937#4028937

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4028937