0 Replies Latest reply on Mar 11, 2009 5:01 PM by fuchs

    exclud user-role from

    fuchs

      Hello!

      Iam using JBoss Portal 2.7 downloaded version, but without upgrade.
      The problem is that the "Dashboard" is allowed for all users.
      I want to forbit the users to access the "Dashboard".
      Thats why i gave the "jboss-portal.sar/.../default-object.xml" a "security-constraint" in the dashboard section.

      <deployment>
       <if-exists>keep</if-exists>
       <context>
       <context-name>dashboard</context-name>
       <security-constraint>
       <policy-permission>
       <action-name>viewrecursive</action-name>
       <role-name>Admin</role-name>
       </policy-permission>
       </security-constraint>
       <properties>
      ...
      


      But it doesnt seem to be the right way.
      I havent valideted against the dtd, so it could be on the wrong position?

      Someone knows what i could do?
      (excuse may bad english.)