Re: Pages and permissions

In your WEB-INF/pages directory (assuming you are using default
jetspeed-pipeline, not jetui-pipeline), try opening up the root folder to
everyone, and then constraining access to specific folders or pages from
there

 <security-constraints>
    <security-constraints-ref>public-view</security-constraints-ref>
  </security-constraints>


On Thu, Jul 11, 2013 at 4:13 AM, Jiri De Jagere <[email protected]> wrote:

> Hi,
>
>
> I'm trying to set up a series of pages with specific permissions. I'm
> struggling to understand why some pages are displayed (or why not). My goal
> is to achieve the following pages available in the logged-in vs logged-out
> situations:
>
> - Not logged in:
>         - landing.psml
>         - registration.psml
>         - about.psml
>
> - Logged in:
>         - news.psml
>         - my-account.psml
>         - about.psml
>
> I've set the root folder permissions for (users=*, permissions=view). I've
> set the security constraints for the individual pages as follows:
>
> - about.psml (users=* / permissions=view)
> - landing.psml (roles=guest / permissions=view)
> - my-account.psml (roles=user,manager,admin / permissions=view with an
> extra security-constraint on users=guest)
> - news.psml (roles=user,manager,admin / permissions=view)
> - landing.psml (roles=guest / permissions=view)
>
> When the user is not logged in I get the correct pages:
>
> - landing.psml
> - registration.psml
> - about.psml
>
> When I log in with any user (role could be any of the three) I get the
> following pages:
>
> - landing.psml (would not want to see this)
> - registration.psml (would not want to see this)
> - news.psml
> - about.psml
>
> As you notice, I'm missing my-account.psml because of the extra
> security-constraint and I get all the pages meant to be seen only when not
> logged in.
>
> Any suggestions on why this is going wrong would be greatly appreciated.
>
>
> Thanks!
>
>
> Jiri
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>


-- 
David