Uploaded image for project: 'JBoss Portal'
  1. JBoss Portal
  2. JBPORTAL-1239

page level security not honored in the navigation system

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: 2.6.Beta1, 2.6.CR1
    • Fix Version/s: 2.6.Beta1
    • Component/s: Portal Security
    • Labels:
      None
    • Environment:

      Windows XP

      Description

      In 2.4 sp1 pages are checked for security before being displayed as a tab in the navigation using this jsp:

      jboss-portal.sar\portal-core.war\WEB-INF\jsp\catalog\index.jsp

      This seems to be handled by the psib request parameter (a map). In 2.4 the map only gives you PortalNodeURLs that you have permissions on, in all the 2.6 versions you get all the siblingURLs (your term in the JSP page) regardless of the permission settings in the

      {project name}

      _object.xml

      Can this be fixed so that the psib parameter only gives you a handle to a map that gives you objects you have permissions to see?

      Thanks
      Stephen

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                theute Thomas Heute
                Reporter:
                swestbom Stephen Westbom
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: