Forums

Home » Liferay Portal » English » 3. Development

Combination View Flat View Tree View
Threads [ Previous | Next ]
toggle
Sumalatha Nelluri
Security issues in my liferay portal
May 23, 2014 6:50 AM
Answer

Sumalatha Nelluri

Rank: Junior Member

Posts: 27

Join Date: January 30, 2013

Recent Posts

Hi,

Somehow My liferay portal bogs and message board and documents &media control panels are shared to other logged in users .It should be displayed to admin only.
anybody knows how to control the access of control panel to others?

Screen attached here.
This is a major security issue please help me.
Attachment

Attachments: documents.JPG (30.6k)
Diego Figueroa
RE: Security issues in my liferay portal
May 23, 2014 10:25 AM
Answer

Diego Figueroa

Rank: Junior Member

Posts: 33

Join Date: March 11, 2010

Recent Posts

Perhaps one of the roles your users has is given permission to access to pieces in the control panel. You should check the different permissions for the roles and remove the ones your users shouldn't access.
Sumalatha Nelluri
RE: Security issues in my liferay portal
May 24, 2014 12:03 AM
Answer

Sumalatha Nelluri

Rank: Junior Member

Posts: 27

Join Date: January 30, 2013

Recent Posts

Thanks for the information.
I observed that liferay power user role has one permission called "Access to control panel" which is enabled by default for Blogs,Wikis etc.

Can i disable this permission safely so that no power users get access to control panel?
will it effect any thing else in Liferay?
Subhash Pavuskar
RE: Security issues in my liferay portal
May 24, 2014 3:39 AM
Answer

Subhash Pavuskar

Rank: Regular Member

Posts: 234

Join Date: March 12, 2012

Recent Posts

http://java-liferay.blogspot.in/2012/07/hide-and-disable-access-to-liferays-61.html?m=1
Sumalatha Nelluri
RE: Security issues in my liferay portal
May 25, 2014 3:06 AM
Answer

Sumalatha Nelluri

Rank: Junior Member

Posts: 27

Join Date: January 30, 2013

Recent Posts

Hi Subhash,
I checked this but i should display "My account" control panel option to all users. remaining options i have to disable for all users.
Manish Yadav
RE: Security issues in my liferay portal
May 25, 2014 11:49 PM
Answer

Manish Yadav

Rank: Expert

Posts: 384

Join Date: May 26, 2012

Recent Posts

Hello Sumalatha ,

First you have to create Role ,then Define Permissions,

Login to control pannel-> Role-> Click on User(eg:- In case if you want to define permission to User Role) Define Permission.

Hope this will work for you emoticon


Kind Regards,
Manish Banwari Lal yadav
Sumalatha Nelluri
RE: Security issues in my liferay portal
May 26, 2014 12:23 AM
Answer

Sumalatha Nelluri

Rank: Junior Member

Posts: 27

Join Date: January 30, 2013

Recent Posts

Hi Manish,
I can resolve this issues by deleting "Access in Control Panel" permission for power users.
But i want to know will it effect any part of liferay?

another doubt, can i make site pages manageable for "power users"?.

Thanks for the information.
Manish Yadav
RE: Security issues in my liferay portal
May 26, 2014 6:21 AM
Answer

Manish Yadav

Rank: Expert

Posts: 384

Join Date: May 26, 2012

Recent Posts

Dear Sumalatha,
I will recommend to create new custom role and assign permission instead of modify permission of power user,

Regards,
Manish Yadav
Sumalatha Nelluri
RE: Security issues in my liferay portal
May 26, 2014 9:43 PM
Answer

Sumalatha Nelluri

Rank: Junior Member

Posts: 27

Join Date: January 30, 2013

Recent Posts

Hi Manish,
I could do this but around 80k users i have to assign to newly created role.
anyway we do not have much restrictions on this role because we have our own roles.

By default control panel is not displaying to all power users.somebody modified parameters in URL and tried to access this panel.
Thanks for your assistance.