portals-jetspeed-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "dian hina (Jira)" <jetspeed-...@portals.apache.org>
Subject [jira] [Updated] (JS1-429) How to entirely block access to the customizer
Date Sat, 26 Jun 2021 20:29:02 GMT

     [ https://issues.apache.org/jira/browse/JS1-429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

dian hina updated JS1-429:

oke finish

> How to entirely block access to the customizer
> ----------------------------------------------
>                 Key: JS1-429
>                 URL: https://issues.apache.org/jira/browse/JS1-429
>             Project: Jetspeed
>          Issue Type: Bug
>          Components: Customizer
>    Affects Versions: 1.4
>         Environment: Operating System: Other
> Platform: Other
>            Reporter: Paul M
>         Attachments: 1z0-1000-Exam-Dumps-2019.pdf
> Hi,
> sorry that this isn't totally a bug, but...
> I would like to know how to block access to the customiser; I can remove the 
> "Customize: HTML WML" from the web page, but if I know the URL to customise the 
> user's portal, I can simply enter it directly... 
> e.g. http://localhost/jetspeed/portal/media-type/html/user/anon/page/default.
> psml?action=controls.Customize&reset=on
> This means that I can change the look and feel for the anonymous user.
> I can't find out where in the documentation it says how to block this.. I have 
> modified all sorts of things in the conf/admin.xreg file, even trying to break 
> the customiser altogether to see how it works.
> I'm probably being dumb, but am desperate for help. And maybe an addition to the 
> FAQ for other equal idiots would be possible!
> thanks for looking kindly on idiot user.
> Paul

This message was sent by Atlassian Jira

To unsubscribe, e-mail: jetspeed-dev-unsubscribe@portals.apache.org
For additional commands, e-mail: jetspeed-dev-help@portals.apache.org

View raw message