[LPS-31208] Centralize the permission logic that checks for permission to access Control Panel applications - Liferay Issues

XML

Word

Printable

Details

Type: Story
Status: Closed
Priority: Minor
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 6.2.0 CE M5
Component/s: Legacy, Legacy > Control Panel menu, User Management > Roles
Labels:
None

Epic/Theme:
- security

Description

Currently, there are several components that do permission checks to allow accessing Control Panel applications. The goal of this story is to centralize all checks to ensure that they are all consistent and all security policies are properly respected.

This will benefit Liferay Portal Developers, by making it easier to maintain this code and ensure that there are no security vulnerabilities.

Attachments

Issue Links

is related to

LRDOCS-491 Permission logic for Control Panel apps is being centralized

Closed

Options

Sub-Tasks

1.	Refactor ControlPanelEntry framework to provide easier to understand methods to override	LPS-31209		Closed	Jorge Ferrer
2.	Centralize permission check to access any portlet in Control Panel to one class	LPS-31210		Closed	Brian Chan

Activity

People

Assignee:: Justin Choi (Inactive)

Reporter:: Jorge Ferrer

Recent user:: Kiyoshi Lee

Participants of an Issue:: Jorge Ferrer, Juan Fernández, Justin Choi

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 26/Nov/12 6:56 AM

Updated:: 13/Nov/14 3:07 AM

Resolved:: 23/Apr/13 10:55 AM

Packages

Version	Package
6.2.0 CE M5