Securing Content in CMS Admin

[turgon]

Hi,

I am trying to figure out how I could set up company web pages in JBoss portal using the CMS Admin. I have been able to create files/directories, uploading etc., but there is one thing I cannot figure out and I couldn't find it from the user guide either.

The thing is that there is a need that the company will have on one hand public pages that all random vistors can see, and on the other hand pages where only registered users can gain access. This means that I would need to set different security levels for different content files and directories. However, there seems to be no buttons for doing this and I'm confused.

So could someone please tell me how to do this. And please tell me I can do this!

[mdugan]

I saw this in another thread. You would put this in your page declaration that you want to protect:

<security-constraint>
 <policy-permission>
 <role-name>Admin</role-name>
 <action-name>view</action-name>
 </policy-permission>
 </security-constraint>

[turgon]

I don't think that answers my question.

There is now two different meanings with the word page. With your XML piece I could secure portal pages, but I am not talking about them. What I do want is to secure an individual HTML page I upload with the CMS admin and they do not have XML declarators with them. As far as I understand the responsible piece here would be the CMSPortlet, which should check for each page/resource whether the user is authorized to view it.

I fear that if I don't find a solution to this we may need to switch to another portal, but that would again cause other problems

[theute]

If you look a bit in Jira you will find this:
http://jira.jboss.com/jira/browse/JBPORTAL-532

It means that it is planned but but not yet implemented. You can vote for this task in Jira if you want.