Portlet permissions, using the security element

[shazzaam]

Hi,

I found this documentation for an older version of JBoss Portal, where you can set custom permissions for a portlet in the jboss-portal.xml:

http://docs.jboss.org/jbportal/v2.0RC2/reference-guide/en/html/security.html

I don't see this in the newer documentation, and when I try implementing it I get a SAXParser exception re: the security element in my jboss-portal.xml, so I guess this functionality has changed, but I'm hoping it hasn't been removed completely. Can someone direct me to a source for creating custom portlet permissions?

[shazzaam]

Hi,

Maybe I didn't ask the question right, I'm going to rephrase it, in hopes that it's more clear what I'm asking:

In JBoss portal 2.6.5 is it possible to create custom permissions for a role at the portlet level? For instance, say I want to add a Write permission so that only certain roles will be able to Write/Make changes within that portlet, is this possible without having to write my own ACL API?

[peterj]

If by "write permission", you mean the ability for the user to enter edit mode (for read permission the user can enter only view mode), the answer is no.

Based on the permission names "view" and "personalize", one would think that "view" would be "read access' and "personalize" would be "write access". But that is not the case - even a user with only view access can go into edit mode and change the preferences.

The above comes from my experiences with 2.4 through 2.6.4. I have not yet tried this out on 2.6.5 so I don't know if it has changed.

[shazzaam]

Hey PeterJ, thanks for replying.

By "write permission" I'm just referring to any custom permission that you may want to add to check a user's permission for a given portlet. Currently, the only permissions available are view, view-recursive, personalize and personalize-recursive

[peterj]

As far as I know, there is no way to extend the current set of permissions to add your own.