Security issues in my liferay portal

[Sumalatha N, geändert vor 9 Jahren.]

Hi,

Somehow My liferay portal bogs and message board and documents &media control panels are shared to other logged in users .It should be displayed to admin only.
anybody knows how to control the access of control panel to others?

Screen attached here.
This is a major security issue please help me.

[Diego Figueroa, geändert vor 9 Jahren.]

Perhaps one of the roles your users has is given permission to access to pieces in the control panel. You should check the different permissions for the roles and remove the ones your users shouldn't access.

[Sumalatha N, geändert vor 9 Jahren.]

Thanks for the information.
I observed that liferay power user role has one permission called "Access to control panel" which is enabled by default for Blogs,Wikis etc.

Can i disable this permission safely so that no power users get access to control panel?
will it effect any thing else in Liferay?

[Subhash Pavuskar, geändert vor 9 Jahren.]

http://java-liferay.blogspot.in/2012/07/hide-and-disable-access-to-liferays-61.html?m=1

[Sumalatha N, geändert vor 9 Jahren.]

Hi Subhash,
I checked this but i should display "My account" control panel option to all users. remaining options i have to disable for all users.

[Manish Yadav, geändert vor 9 Jahren.]

Hello Sumalatha ,

First you have to create Role ,then Define Permissions,

Login to control pannel-> Role-> Click on User(eg:- In case if you want to define permission to User Role) Define Permission.

Hope this will work for you


Kind Regards,
Manish Banwari Lal yadav

[Sumalatha N, geändert vor 9 Jahren.]

Hi Manish,
I can resolve this issues by deleting "Access in Control Panel" permission for power users.
But i want to know will it effect any part of liferay?

another doubt, can i make site pages manageable for "power users"?.

Thanks for the information.

[Manish Yadav, geändert vor 9 Jahren.]

Dear Sumalatha,
I will recommend to create new custom role and assign permission instead of modify permission of power user,

Regards,
Manish Yadav

[Sumalatha N, geändert vor 9 Jahren.]

Hi Manish,
I could do this but around 80k users i have to assign to newly created role.
anyway we do not have much restrictions on this role because we have our own roles.

By default control panel is not displaying to all power users.somebody modified parameters in URL and tried to access this panel.
Thanks for your assistance.