Problems with security for portlets?

[anson.smith]

Hi all, I have a portlet that is working correctly. What I want is to hafve that portlet viewable only for usere that have logged in. (Users or Admins). I know there is a way to do this but I am having trouble finding examples of this. Could someone point me in the right direction?

[mholzner]

You can secure the portal, or an instance of it, or a window of an instance of it, via roles. You can do that either via a security-constraint element in the jboss-portlet.xml , or in the *-object.xml, or you can use the management UI to do the same after the portlet is deployed.