Securing Personalize on portlet page

Can one secure the 'Personalize' link in the porlet EDIT view to a particular LDAP group? this way only those persons who are in the group can personalize?

I know you can change the access on a Page or a Tabbed Region to specify which portal groups have one of the Personalize privileges and which groups may have one of the other privileges (Manage, View, etc.) Which group currently has Manage or Manage Content privileges on the page and can put the page into Edit mode? Is that group different than the group you want be allowed to edit the defaults of a portlet when the page in in Edit mode?

Similar Messages

Portlet Page Navigation

Hi,
Can we have page navigation in portlet? What I mean to say is, can we have a link inside a WSRP portlet page (A JSF page actually) to navigate to a different JSP/JSF page within the same portlet container? Seems like it only refreshes the same page.
I am using Oracle WebCenter 11G and created a portlet application and consumed it inside webcenter. The portlet itself works fine, but when I am trying to click on a command link on the same page, it only refreshes the portlet, the actual page transition does not happen.
Please help.
Thank you,
Kanchan Upadhyay

Hi Yannick,
I would like to express my gratitude for helping so much!! Following your suggestion ("Performance issue"), I have started using the taskflow thru WebCenter extended application and not as a portlet. I have created .jsff pages (just copied the contents of my old JSPs to them) and created all navigation rules the way a bounded taskflow would expect to be (task-flow-definitions.xml). Finally I created a JSP page and dragged and dropped the taskflow file on the JSP to create a region and use it inside that.
Now, when I run it, I get the following exception..
path:/PollingPortlet-PollViewController-context-root spec-version:2.5]] Servlet failed with Exception
java.lang.NullPointerException
     at oracle.adfinternal.view.faces.renderkit.rich.FormRenderer.encodeAll(FormRenderer.java:234)
     at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1369)
     at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:335)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:751)
     at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:415)
     at oracle.adf.view.rich.render.RichRenderer.encodeChild(RichRenderer.java:2572)
     at org.apache.myfaces.trinidad.render.CoreRenderer.encodeAllChildren(CoreRenderer.java:432)
     at oracle.adfinternal.view.faces.renderkit.rich.DocumentRenderer.encodeAll(DocumentRenderer.java:1066)
     at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1369)
     at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:335)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:751)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.__encodeRecursive(UIXComponentBase.java:1501)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeAll(UIXComponentBase.java:771)
     at javax.faces.component.UIComponent.encodeAll(UIComponent.java:942)
     at com.sun.faces.application.ViewHandlerImpl.doRenderView(ViewHandlerImpl.java:271)
     at com.sun.faces.application.ViewHandlerImpl.renderView(ViewHandlerImpl.java:202)
     at javax.faces.application.ViewHandlerWrapper.renderView(ViewHandlerWrapper.java:189)
     at org.apache.myfaces.trinidadinternal.application.ViewHandlerImpl.renderView(ViewHandlerImpl.java:193)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._renderResponse(LifecycleImpl.java:710)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:273)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:205)
     at javax.faces.webapp.FacesServlet.service(FacesServlet.java:266)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:191)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:97)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:420)
     at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:420)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:247)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:157)
     at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:326)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3592)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2202)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2108)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1432)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
SUBSYSTEM = HTTP USERID = <WLS Kernel> SEVERITY = Error THREAD = [ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)' MSGID = BEA-101020 MACHINE = TN-WS722-122 TXID = CONTEXTID = TIMESTAMP = 1269955815847
WatchAlarmType: AutomaticReset
WatchAlarmResetPeriod: 30000
Can you please guide me on this? I am totally clueless as the exception is not coming from any of my class!!
Another problem that I am facing is, how can I validate users in such applications? What I mean to say is, if a user is logged in webcenter, and is trying to access my application exposed as a taskflow, that user's login information should automatically propagate in my application. For example, I may have an admin link in my application, that should only be available to admin user's and no other user should be able to check it. I am unable to implement such functionality. If you can guide on this, that would be helpful too.
Many thanks in advance!!
Thank you,
Kanchan

PDK-Java Security manager: controlling portlet appearance in portlet list

Hi,
The Understanding PDK-Java Portlet Security article says: "Portlet security is handled at two main points in Oracle9iAS Portal. It is used when a user view the list of portlets available from a provider. It is also used when rendering the portlet on a portal page."
I don't see how a portlet can control its appearance in the list of available portlets. Is the article inaccurate, or am I overlooking something?
Thanks,
Peter

The article is correct.
Before showing a portlet in the portlet repository, the provider is contacted by the portal to determine if the current user should be able to see the portlet. This is the isRunnable call.
In release 3.0.9, a feature was added allowing a provider to instruct the portal to cache the results of this call. There are 2 portlet properties associated with this feature:
<portlet>
<callIsRunnable>true/false</callIsRunnable>
<callGetPortlet>true/false</callGetPortlet>
</portlet>
The second property affects whether a call to get a portlet's metadata is made before displaying it in the portlet repository.

Portlet page names

Ok I think I'm on the right newsgroup now.
Subrahmanyam,
My question back to you. Who do you login in as? I am logging in as administrator.
-Travis
Subject: Re: portlet page names.
Date: Mon, 22 Apr 2002 10:15:29 -0600
From: Subrahmanyam Allamaraju <[email protected]>
Newsgroup: weblogic.developer.interest.personalization
Travis,
You can change the display names via the JSP tools. Login to the tools, and select
the portal for the "everyone" group. The procedure is the same as for group portals.
In future, please post all WLP related questions to the weblogic.developer.interest.portal
newsgroup.
Sincerely,
Subbu
travis wissink wrote:
I have a question regarding portlet names. Referring to the stockportal that comeswith portal server, I notice that the name for one of the portlets is "About Avitek."
In the ebcc the portlet is identified as "AboutAvitek." So, I am wondering how the
space got in the middle of the two words. I found that in the PORTLET_P13N table
that the value in the Display_Name column was the "About Avitek." I would like to
control the title bar name of the portlet for non-logged in users. Has anyone else
notices and overcome this issue? My desired goal is to allow the ebcc user to control
the title bar name through the ebcc. Any suggestions would be most appreciated.

Travis,
I just spoke to the engineer working on this for the 4.1 release and it has
already been implemented. If you want to do some custom coding I think you
can also write a JSP that exposes the API methods to your users to change
the display name.
http://edocs.bea.com/wlp/docs40/javadoc/wlp/index.html
Sincerely,
Daniel Selman
"travis wissink" <[email protected]> wrote in message
news:3cc46327$[email protected]..
>
Dan,
Actually, I think the "display-name" is the more appropriate element toedit.
>
This is a bummer; this appears so naturally for the example, when in factits going
to be nearly impossible for a "Business User" to edit such a file. Iguess my main
request to the EBCC group is if there is an option in any of theassociated schema's,
e.g. the "display-name" element in the portal-1_0.xsd schema, then providea way
to edit it via the EBCC.
Thanks,
Travis Wissink
"Daniel Selman" <[email protected]> wrote:
Travis,
It looks like you are going to have to edit the XML by hand to introduce
the
space into the portlet-name. E.g.
<portlet-name>ReviewNewsletters</portlet-name>
goes to:
<portlet-name>Review Newsletters</portlet-name>
I will take this up with the EBCC engineers and file a CR. Please let me
know if this does not solve the problem.
Thanks (and sorry),
Daniel Selman
"travis wissink" <[email protected]> wrote in message
news:3cc45bd8$[email protected]..
Subbu,
I've been all over the ebcc. Even inside of the xml files. Nowhere dois
see the
possibility of manipulating the "Display Name" of the portlets in theebcc
at all.
Of course when you create a new portlet you can name it but that namehas
restrictions
against it, e.g. no spaces.
Do you know specifically where I can manipulate that attribute in theebcc?
-Travis
Subrahmanyam Allamaraju <[email protected]> wrote:
Sorry for mt wrong answer. You've to do this via the EBCC. Check the
default portal configuration.
Sincerely,
Subbu

Can I import HTMLs from inside the project and use as portlet page ?

As you know, I am using Java Studio Creator 2 Update 1 for my current portal project. I have created JSR-168 JSF Portlet Project for my portlet development.
As I have some html pages ready for my development,
Can I import HTMLs from inside the project and use as portlet page for my project?
I did the followings steps:
1: In side the project - File -> Add Existing Item -> Web Page ( imported test.html page from my local folder)
2: Let it convert some of the tags for me ( so now it becomes - �test.jsp� )
3: Set it to initial view.
4. A default portlet page � newPortletPage.jsp is still there with no initial view.
Now after doing this, No Visual Designer and Properties window available to for that �test.jsp� page. Though it allowed me to �build� the project successfully.
When I build and run the portlet application, got the error message �Error occurred in portlet!� on Pluto Portal. Please advice.

You do not open fcpproject files. You don't double click or anything else. The files have to be in the correct folder structure in the Final Cut Projects folder and the application opens them automatically. Can you post screen shots of the Final Cut Projects folder and its location.

The security validation for this page is invalid – Infopath 2010

Hello Experts,
I have created browser enabled Infopath form and written a custom code (infopath 2010). I have a “Save” button on a form that submits the data into multiple relational sharepoint list. While debugging through VSTA everything goes well and successfully submits
the data, but after publishing a form(browser enabled) I am not able to save a data to sharepoint list. When I Clicked on save button, it just refreshing a page, even the same was getting after
made it to full trust and approved by Admin.
Before this I was using “Submit” button to submit a form, that time I was getting a popup with the message “There has been an error while processing the form”. And in log files it was showing error message as “The security validation
for this page is invalid”.
I referred many blogs regarding validation error and tried almost everything in every way, some of shortly mentioned below,
Formdigest (It not works for me)
Security Validation (It works perfectly)
The second option is working for me. (But this is not a good practice and also not recommended)
Just want to know “Without making Security Validation Off” how can I resolved this validation issue from infopath 2010 form.
Please share your thoughts on this. Any help is appreciated.
Regards,
Uday

Hi Uday,
Have you tried SPWebapplication.FormDigestSettings.Enabled = false to turn off the digest setting property for the web application? See this blog for the details.
http://ktskumar.wordpress.com/2009/03/09/the-security-validation-for-this-page-is-invalid-click-back-in-your-web-browser-refresh-the-page-and-try-your-operation-again/
Thanks & Regards,
Emir
Emir Liu
TechNet Community Support

JavaScript - Error: The security validation for this page is invalid...

Hi there,
I have a question regarding javascript and the security validation.
I have created a custom action for a document library. This custom action should update a field in all selected documents by the user. But when I do the update, I got this error message:
"The security validation for this page is invalid. Click Back in your Web browser, refresh the page, and try your operation again."
I know, I could AllowUnsafeUpdates, if I were using C#, but actually I can only use JavaScript at this stage. Or does anybody know, how to allow this or switch to C# in this area?
Here is my custom action:
<?xml version="1.0" encoding="utf-8"?>
<Elements xmlns="http://schemas.microsoft.com/sharepoint/">
<CustomAction
Id="GrolmansJavaScriptFile"
ScriptSrc="~site/_layouts/SharePoint-Z-Drive-Project/gg1855.js"
Location="ScriptLink">
</CustomAction>
<CustomAction
Description="Approve Documents"
Title="Approve Documents"
Id="RibbonDocumentsManageApproveDocuments"
Location="CommandUI.Ribbon"
RegistrationId="10000"
RegistrationType="List"
Sequence="0"
xmlns="http://schemas.microsoft.com/sharepoint/">
<CommandUIExtension xmlns="http://schemas.microsoft.com/sharepoint/">

<CommandUIDefinitions>
<CommandUIDefinition Location="Ribbon.Documents.Manage.Controls._children">
<Button Id="Ribbon.Documents.Manage.ApproveDocuments"
Command="{4E2F5DC0-FE2C-4466-BB2D-3ED0D1917763}"
Image32by32="~site/_layouts/Images/SharePoint-Z-Drive-Project/approve_document_32x32.png"
Image16by16="~site/_layouts/Images/SharePoint-Z-Drive-Project/approve_document_16x16.png"
Sequence="0"
LabelText="Approve Documents"
Description="Approve Documents"
TemplateAlias="o1" />
</CommandUIDefinition>
</CommandUIDefinitions>
<CommandUIHandlers>

<CommandUIHandler Command="{4E2F5DC0-FE2C-4466-BB2D-3ED0D1917763}" CommandAction="javascript:void(ApproveDocuments());" />
</CommandUIHandlers>
</CommandUIExtension>
</CustomAction>
</Elements>
And here is my JavaScript code file:
function ApproveDocuments()
var siteUrl = '/';
var clientContext = new SP.ClientContext(siteUrl);
var currentlibid = SP.ListOperation.Selection.getSelectedList();
var currentLib = clientContext.get_web().get_lists().getById(currentlibid); //Gets the current Library
var selectedItems = SP.ListOperation.Selection.getSelectedItems(clientContext);
for (var i in selectedItems) {
currentLib.getItemById(selectedItems[i].id).set_item('DocumentStatus', 'Approved');
currentLib.getItemById(selectedItems[i].id).update();
clientContext.executeQueryAsync(Function.createDelegate(this, this.onQuerySucceeded), Function.createDelegate(this, this.onQueryFailed));
function onQuerySucceeded()
alert('Document approved:' + newListItem.get_id());
function onQueryFailed(sender, args)
alert('Document approval failed: ' + args.get_message() + '\n' + args.get_stackTrace());
Any idea, how to perform the update on the selected items?
Thanks for any hint.
Dennis

Ok, I found the reason.
I just had to replace the SP.ClientContext line in JavaScript.
Instead of
var clientContext = new SP.ClientContext(siteUrl);
I need to use this one:
var clientContext = SP.ClientContext.get_current();
Dennis

How to create portlet pages in oracle webcenter 11g?

Hi all,
currently we are using an application with oracle web portal 10g server. Is it possible to do migration all portlet pages 10g portal to 11g webcenter ?
and please clarify how to create a portlet page in webcenter 11g?
Regards
Nagarajan

Hi Nagarajan,
In webcenter there is no concept of portlets.Here you need to have all the portlets as WSRP.
So in a jist, you need to expose your current portlets as WSRP and the same should be consumed in webcenter portal pages.
Hope this make things clear.

Personalize the home page for every user.

Dear CRM guru's,
I would like to personalize the home page for all users by hiding some of the sections(My open tasks and Alerts). I don't want the users to enable these 2 sections when they try to personalize the page. Can you please suggest me how I can achieve this.
Thanks!
Surya.

Surya,
This is very easy. The homepage is another view in an application component.
For the sales home page, you would go to application WCC_SLS_HOME and configure the view WCC_SLS_HOME/SalesHome.
You can then restrict what applications show up on that home page.
You just need to find out what "home" application your role is using and configure that one accordingly. Most follow the WCC_*_HOME pattern.
Take care,
Stephen

SharePoint Error "The security validation for this page is invalid" when delete an item

Hi,
I have SharePoint 2010 setup and works fine until today all of a sudden it throws error "The security validation for this page is invalid" when delete a SharePoint document or list item.
There is no custom event handler deployed on library/list, and it should not be account issue as the same account works yesterday, and even after I turn off security validation from Central Admin, it still doesn't work.
The only change I did is turn off Dynamic Compression from IIS, after that I tried enable back Dynamic Compression but it still doesn't work.
Does anyone know what could be the possible reasons? Thanks in advance.

hi,
in the page just try to make this :
<SharePoint:FormDigest runat="server" />
PrasadWT

Item level security on a navigation page

I am trying to set up item level security on a navigation page (9IR2) so that only certain users will be able to see a link that hte are authorized to follow (or at least this is the intent). After setting this up and creating a test user, this user can see all the links and follow them including the ones for which access should not be allowed.
Has anyone run accross this behavior or offer some tips on what I might be doing wrong?
Thanks,
Curt

I'd appeciate a reply as well. For now I've been using content as a PL/SQL stored procedure in a package and then wrapping is_logged_in code around it. It works but isn't cusomizable.

The security validation for this page is invalid

I am trying to declare items in doc library inside a specific folder as records. This is my code:
using (SPWeb site = SPContext.Current.Site.OpenWeb("myClassicSite")) {
                    site.AllowUnsafeUpdates = true;
                    SPList list = site.Lists.TryGetList(currentDocLibName);
                    SPFolder folder = list.GetItemById(foldId).Folder;
                    try {
                            SPDocumentLibrary doclib = (SPDocumentLibrary)site.Lists.TryGetList(currentDocLibName);
                            SPView defaultView = doclib.Views["my custom view"];
                            SPListItemCollection docColl = doclib.GetItemsInFolder(defaultView, folder);
                            foreach (SPListItem item in docColl) {
                                Records.DeclareItemAsRecord(item); // throws exception here
                    } catch (Exception) {
It throws exception: "The security validation for this page is invalid"
I just can't declare items as records, I tried RunwWithElevetedPriviledges, AllowUnsafeUpdate, and SPWebapplication.FormDigestSettings.Enabled = false;
What am I doing wrong?

Have you tried adding SPUtility.ValidateFormDigest(); before the start of your code section? Have a look at the article below for more info on the same.
http://blogs.technet.com/b/meamcs/archive/2011/04/04/troubleshooting-sharepoint-error-the-security-validation-for-this-page-is-invalid.aspx
The problem should be originating because of the use of AllowUnsafeUpdates in your code above. Here is a good writeup on best practices when using AllowUnsafeUpdates in the code:
https://hristopavlov.wordpress.com/tag/formdigestsettings/
Thanks, Ransher Singh, MCP, MCTS | Click Vote As Helpful if you think that post is helpful in responding your question click Mark As Answer, if you think that this is your answer for your question.

Providing security to pdf web page.

How would I provide security to a web page that is a pdf file? Basically I want the user to be able to access the file only if they are logged in. I do not want them to be able to put the .pdf webpage in their favorites and access it without logging in.
Thanks

Password protect the pdf?

Personalization in iproc page

Hi All,
We have requirement to personalization the iproc page.
When a requisition is created and goes for approval. And the approver wants to make any changes on the requisition he will hit link 'Edit Requisition'.
The changes we want to make is to change the price, supplier and supplier site.
All these fieds are uneditable in that page.
we were able to make the price to editable by making 'Read Only' option to false under Operating Unit level.
but we were not able to do the same for supplier and supplier site.
Price column is 'Message Text Input' and Supplier and Supplier Site columns are 'Message Styled Text'.
Is there any way to make these columns to editable mode?
thanks in advance.
Jana

Hi,
MessageStyleText fields are read only by nature. You can't make them editable using personalization or controller extension.
For that you need to edit your page definition and mark supplier site fields render false.
Create 2 new fields as MessageTextInput and mark them by default false and in controller extension check for some condition like operating unit and render them true in processRequest method.
Or you can do this way-
Using personalization Render false supplier site columns.
Using personalization create 2 new items(MessageTextInput fields). Map them to same VO attributes as 2 fields you want to make editable.
Regards,
Mukesh

How can i access built _in portlet pages(???)

Hi every body,
how can i access built _in portlet pages.
i want to replace their button and images.
can every body help me???????????????
thanks

You can't - it's only for cell phones.
Clinton

Securing Personalize on portlet page

Similar Messages

Maybe you are looking for