Re: Pages and permissions

Hi David,


That is what I have. The permissions at the page levels seem to be cached somehow.


Mvg,

-jiri 

On 11 Jul 2013, at 17:41, David Taylor <[email protected]> wrote:

> In your WEB-INF/pages directory (assuming you are using default
> jetspeed-pipeline, not jetui-pipeline), try opening up the root folder to
> everyone, and then constraining access to specific folders or pages from
> there
> 
> <security-constraints>
>    <security-constraints-ref>public-view</security-constraints-ref>
>  </security-constraints>
> 
> 
> On Thu, Jul 11, 2013 at 4:13 AM, Jiri De Jagere <[email protected]> wrote:
> 
>> Hi,
>> 
>> 
>> I'm trying to set up a series of pages with specific permissions. I'm
>> struggling to understand why some pages are displayed (or why not). My goal
>> is to achieve the following pages available in the logged-in vs logged-out
>> situations:
>> 
>> - Not logged in:
>>        - landing.psml
>>        - registration.psml
>>        - about.psml
>> 
>> - Logged in:
>>        - news.psml
>>        - my-account.psml
>>        - about.psml
>> 
>> I've set the root folder permissions for (users=*, permissions=view). I've
>> set the security constraints for the individual pages as follows:
>> 
>> - about.psml (users=* / permissions=view)
>> - landing.psml (roles=guest / permissions=view)
>> - my-account.psml (roles=user,manager,admin / permissions=view with an
>> extra security-constraint on users=guest)
>> - news.psml (roles=user,manager,admin / permissions=view)
>> - landing.psml (roles=guest / permissions=view)
>> 
>> When the user is not logged in I get the correct pages:
>> 
>> - landing.psml
>> - registration.psml
>> - about.psml
>> 
>> When I log in with any user (role could be any of the three) I get the
>> following pages:
>> 
>> - landing.psml (would not want to see this)
>> - registration.psml (would not want to see this)
>> - news.psml
>> - about.psml
>> 
>> As you notice, I'm missing my-account.psml because of the extra
>> security-constraint and I get all the pages meant to be seen only when not
>> logged in.
>> 
>> Any suggestions on why this is going wrong would be greatly appreciated.
>> 
>> 
>> Thanks!
>> 
>> 
>> Jiri
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
> 
> 
> -- 
> David