Jboss Portal authentication

[marcuspocus]

I'm using JBoss 4.0.1 sp1 with JBoss portal 2.0 alpha, on JDK1.5, WinXP pro, 1gig RAM.

I'm developping a custom navigation portlet, i can make it work like it's supposed, integrate in portal pages, manage windows states etc, but i can't call RenderRequest.isUserInRole(), because it always return false, whatever the role i'm in.

Is it a known bug? A limitation? Couldn't find anything on this...

:(

Thanks in advance,

Marc

[marcuspocus]

This is actual code inside a portlet doEdit() :

if(request.getUserPrincipal() != null)
{
Principal p = request.getUserPrincipal();
getPortletContext().log("UserName : " + p.getName());
getPortletContext().log(" In Admins role : " + request.isUserInRole("Admins"));
getPortletContext().log(" In Users role : " + request.isUserInRole("Users"));
}


Every call to "isUserInRole" return false

[roy.russo]

To use JBoss Portal permissions, your portlet should extend JBossPortlet. For a simple example, look at org.jboss.portal.core.portlet.role.RolePortlet. You will check for role permissions like this then:

req.hasPermission("Admin")

[marcuspocus]

Ok, thanks, that'll work for now, but this isn't jsr168 compliant, no?

[roy.russo]

I believe it is. We are extending the framework to some degree allowing for fine-grained security and tying to JAAS.

[theute]

No, isUserInRole is JSR168 compliant,if it returns always false, it could be a bug, we are not using that feature, we will look at it.

hasPermissions stuff is a JBoss Portal very convenient extension to JSR168 portlets

[julien1]

it is a big in the tomcat/jboss integration.

it has been fixed in jboss-4.0.2beta (not out yet but soon). I have had not tested it yet personnally.

[marcuspocus]

Ahhh!!!

That's more like it...

[ego2002]

I've got the same problem with isUserInRole... it returns always false...

Has it been debugged in 2.2 version of the portal, please?

Thanks a lot.

Il Dima

[julien1]

did you declare your role in portlet.xml ?

[ego2002]

Oh... I didn't know they had to be declared in portlet.xml...
I read they had to be declared in jboss-portlet.xml... that was the reason they didn't work...

THANKS A LOT... Now it's all simpler!!

Il Dima