This document discusses role management and authorization in Liferay portal. It demonstrates how permissions are assigned to roles and how users with different roles have different levels of access. Three roles are set up: MyRole with full permissions to view and configure portlets, TestRole with view-only permissions, and TestRole2 with no portlet permissions. Three users belonging to each role respectively are able to log in and their authorization levels correspond to their roles' permissions.

1. Liferay role management & authorization 2009
LIFERAY PORTAL AUTHORIZATION
&
ROLE MANAGEMENT
Author: Pawan Modi
1

2. Liferay role management & authorization
Table of Figure
2009
FIGURE 1 ..................................................................................................................................................... 3
FIGURE 2 ..................................................................................................................................................... 5
FIGURE 3 ..................................................................................................................................................... 6
FIGURE 4 ..................................................................................................................................................... 7
FIGURE 5 ..................................................................................................................................................... 8
FIGURE 6 ..................................................................................................................................................... 9
FIGURE 7 ................................................................................................................................................... 10
FIGURE 8 ................................................................................................................................................... 11
FIGURE 9 ................................................................................................................................................... 12
FIGURE 10 ................................................................................................................................................. 13
FIGURE 11 ................................................................................................................................................. 14
FIGURE 12 ................................................................................................................................................. 15
FIGURE 13 ................................................................................................................................................. 16
FIGURE 14 ................................................................................................................................................. 17
FIGURE 15 ................................................................................................................................................. 18
FIGURE 16 ................................................................................................................................................. 19
FIGURE 17 ................................................................................................................................................. 20
2

3. Liferay role management & authorization 2009
Architecture
Figure 1
3

4. Liferay role management & authorization 2009
Demo Description
1. Demo use 3 roles i.e MyRole, TestRole & TestRole2.
2. Demo use 3 user’s i.e pawan, suresh & arun. Pawan belongs to Role MyRole. Suresh
belongs to Role TestRole. Arun belongs to Role TestRole2.
3. Demo uses 2 IFrame portlets.
4. MyRole has permission to view & config IFrame portlets.
5. TestRole has permission only to view IFrame portlets.
6. TestRole2 doesn’t have permission to view / config IFrame portlets.
7. Following snapshots demonstrate the same.
4

5. Liferay role management & authorization 2009
MyRole1
1a] User pawan belongs to Role “MyRole1”.
Figure 2
5

6. Liferay role management & authorization 2009
TestRole
1b] User suresh belongs to Role “TestRole”.
Figure 3
6

7. Liferay role management & authorization 2009
TestRole2
1c] User arun belongs to Role “TestRole2”.
Figure 4
7

8. Liferay role management & authorization 2009
MyRole Permissions
2a] Role MyRole has permissions to view & config IFrame portlet.
Figure 5
8

9. Liferay role management & authorization 2009
TestRole Permissions
2b] Role TestRole has permissions only to view IFrame portlet.
Figure 6
9

10. Liferay role management & authorization 2009
TestRole2 Permission
2c] Role TestRole2 doesn’t have permissions to view or config IFrame portlet.
Figure 7
10

11. Liferay role management & authorization 2009
Demo
1] User has not logged in.
Figure 8
11

12. Liferay role management & authorization 2009
2a] User pawan belongs to Role “MyRole1”.
2b] User pawan is logging in.
Figure 9
12

13. Liferay role management & authorization 2009
3a] Role MyRole has permissions to view & config IFrame portlet.
3b] User pawan belong to Role MyRole.
3c] User pawan can view & config IFrame portlet.
Figure 10
13

14. Liferay role management & authorization 2009
4] User pawan logging out.
Figure 11
14

15. Liferay role management & authorization 2009
5a] User suresh belongs to Role “TestRole”.
5b] User suresh is logging in.
Figure 12
15

16. Liferay role management & authorization 2009
6a] Role TestRole has permissions only to view IFrame portlets.
6b] User suresh belong to Role TestRole.
6c] User suresh can only view but cannot config IFrame portlets.
Figure 13
16

17. Liferay role management & authorization 2009
7] User suresh logging out.
Figure 14
17

18. Liferay role management & authorization 2009
8a] User arun belongs to Role “TestRole2”.
8b] User arun is logging in.
Figure 15
18

19. Liferay role management & authorization 2009
9a] Role TestRole2 doesn’t has permissions to view or config IFrame portlet.
9b] User arun belong to Role TestRole2.
9c] User arun doesn’t view or config IFrame portlet.
Figure 16
19

20. Liferay role management & authorization 2009
10] User arun logging out.
Figure 17
20

21. Liferay role management & authorization 2009
11] User has not logged in & not having permission to view or config IFrame portlet.
21