-
Type:
Technical Task
-
Status: Closed
-
Priority:
Minor
-
Resolution: Completed
-
Affects Version/s: None
-
Component/s: None
-
Labels:None
-
Git Pull Request:
Adds a new permission package that can be used to compose model and portlet resource permissions checkers. Extracts common logic into permission checks to be reused by different modules to reduce inconsistency and duplication. New checks can be easily written to add in special business logic if needed to be used by either the ModelResourcePermissionChecker or PortletResourcePermissionChecker, if even more unique logic is required the common interfaces can be easily implemented directly. Request lifecycle permission caching is now managed in ModelResourcePermissionChecker or PortletResourcePermissionChecker which should be considered first before implementing the interfaces directly.
Since modules using the new API no longer consume static permission classes but instead have spring beans, permissions can be customized by updating spring files to point to new classes implementing either the ModelResourcePermission or PortletResourcePermission interfaces.
These changes remove the need to export permission classes from service modules and users of the API should now use the published OSGI services implementing the new interfaces in portal-kernel.
- causes
-
LPS-76973 Exception is thrown when adding a fragment entry
- Closed
-
LPS-77694 Can not add a new Polls
- Closed
-
LPS-77523 NoSuchResourceActionException when adding a web content folder
- Closed
-
LPS-77736 Knowledge Base - request failed to complete when viewing article
- Closed
-
LPS-77958 Viewing Documents and Media in Site Administration throws exception in console
- Closed
-
LPS-77961 Menu items do not appear for staged Wiki portlet
- Closed
- relates
-
LPS-79666 Make Model Resource Permission SPI easier to implement
-
- Closed
-