hi,

the template portal is set with 4 pages.
one of them has a security constraint for the role Admin.

but, when the user without the role Admin go to his dashboard (loaded from the template portal), he can see the admin page/tab.

i take a look at tabs.jsp, and it seems that tabs are loaded without any notion of security.

in JBP_OBJECT_NODE_** i can see that template.adminPage node is well secured.
but, dashboard.anyUser.adminPage are not.


thanks for help

regards.





View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4065829#4065829

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4065829
_______________________________________________
jboss-user mailing list
jboss-user@(protected)
https://lists.jboss.org/mailman/listinfo/jboss-user