practical liferay Java -based Portal Applications development apress phần 4 pdf

CHAPTER 3 ■ MANAGING PORTAL USERS 84 Establishing Password Policies Bythistime,youhavecreatedanorganizationandaddedseveraluserstoit.Eachofthese users will log on to our portal using the username and password supplied by the administrator. It is important that the user set her own password—she shouldn’t use the administrator- assignedpasswordforever.Infact,yousawearlier(inthe“PasswordSettings”sectionunder “CreatingUsers”)thattheadministratorcanforcetheusertochangeherpasswordduringher firstlogin.However,weneedbetterpasswordpoliciesthanthistoensurethesafetyandsecu- rityofourportal.Liferayprovidesadefaultpasswordpolicyandalsoallowsyoutocreateyour own policies for securing your portal. To edit the existing password policy or to create a new policy, select the Password Policies tab in the Enterprise Admin application. You will find the Default Password Policy in the list of availablepolicies.Bydefault,thisistheonlypolicyavailabletoyou,soyouwillnowcreatea policy of your own. To do so, click the Add Password Policy button to open the screen shown in Figure 3-18. Figure 3-18. Creating a new password policy CHAPTER 3 ■ MANAGING PORTAL USERS 85 Enteranameanddescriptionofyourchoiceforthisnewpolicy.Ifyouwantaforced change on the password, enable the Changeable check box. Also mark the Change Required check box and select the Minimum Agetooneofthevaluesdisplayedinthedrop-downlist. Your users will now be forced to wait until the indicated time period elapses before they are allowed to change their password. Inadditiontoaforcedchangeinpassword,youcansetseveralfeaturesonyourpassword policy:  • Syntax Checking Enabled: If this option is enabled, the entered password would be checkedforitslengthand/orcomparedagainstcertainwords.  • History Enabled: If this is enabled, the portal maintains a history of passwords and pre- ventstheuserfromrepeatingpreviouspasswords.  • Expiration Enabled: When this is enabled, the user’s password expires after the speci- fied time period elapses.  • Lockout Enabled: When this option is selected, the portal automatically locks out the user after a certain number of login failures. When you select any of the preceding options, the application displays further options that allow you to fine-tune the selected feature (see Figure 3-19). Figure 3-19. Available options for a new password policy CHAPTER 3 ■ MANAGING PORTAL USERS 86 Changing Default Settings In the process of creating an organization, defining its structure, and adding users, you prob- ablynoticedthatLiferayassignsdefaultvaluestoseveralfields.Youcanactuallychangethese defaultsettingsandassignyourownvaluestocertainfields.Herearethesettingsyoucan change:  • General Settings:Youcanspecifyname,tickersymbol,mailserver,andsoon.  • Authentication: You can control how a user is authenticated on the portal.  • Default User Associations: You can set the default communities, roles, and user groups.  • Reserve Screen Names:Youcanreservescreennamesande-mailIDssothatnobody else can use them.  • Mail Host Names: You can set the mail-host names.  • Email Notifications: You can set the default e-mail addresses and templates for notifi- cation messages. You will now study each of these options in detail. General Settings The General settings screen isshowninFigure3-20. Figure 3-20. Default general settings Youwillchangethedefaultvaluesandusevaluesspecifictotheorganization.Enterthe following information in the General settings dialog: CHAPTER 3 ■ MANAGING PORTAL USERS 87  • Name: ISI  • Legal Name: ISI Ltd.  • Ticker Symbol: ISI  • Industry: Finance  • Type: Securities  • Mail Domain: isi.com  • Time Zone: EST Leavetherestofthefieldsattheirdefaultvalues.SaveyoureditsbyclickingtheSave button. In the Display subscreen, you will find the Liferay logo. You will now set your own logo here.ClicktheChange link underneath the displayed logo. In the file-selection dialog, enter thepathandfilenameoftheISIenterpriselogo.Saveyourchanges.Themodifiedscreenis showninFigure3-21. Figure 3-21. Modifying general settings Whenyoureturntofull-pageview,youwillfindthenewlogodisplayedonthepage. ■Note Not all page themes display the logo. Figure 3-21 uses the Classic theme, which displays the logo, but themes such as Jedi and Transparentia do not. Authentication On the Authentication screen, you willfindseveralsettingspertainingtodifferenttypesof authentication:  • General  • LDAP  • CAS  • NTLM  • OpenID  • Open SSO  • SiteMinder CHAPTER 3 ■ MANAGING PORTAL USERS 88 General Settings The General settings screen forauthenticationisdisplayedinFigure3-22. Figure 3-22. General settings for authenticating a user Here, you can select the mode of authentication. This can be any of the following three values:  • By Email Address  • By Screen Name  • By User ID Dependingonthisvalue,theuserwillberequiredtoenterhere-mailaddress,screen name, or user ID while logging in to the portal. You can then mark the desired check boxes to change other authentication settings. For example, you can allow the user to log in automati- callyusingherpreviouslyenteredcredentials.Andiftheuserforgetsherpassword,shecan request the password by e-mail. You can also allow strangers to create accounts. LDAP LiferaysupportsseveralLDAPserversforuserauthentication.OntheLDAP settings dialog, youwillfindalistofseveralservers:  • Apache Directory Server  • Fedora Directory Server  • Microsoft Active Directory Server  • Novell eDirectory  • OpenLDAP  • Other Directory Server CHAPTER 3 ■ MANAGING PORTAL USERS 89 Selectthedirectoryserverthatyourorganizationisusingandenteritsrelevantdetails(see Figure3-23). Figure 3-23. Directory‑server settings Here,youwillberequiredtoentertheserver-connectiondetails,specifysearchfiltersfor user authentication and mappings, specify search filters for groups and their mappings, select thepasswordpolicy,andsoon.Notethatthesedetailsdependontheparticularserverandits installation.Liferayfacilitatestheverificationofdetailsbyprovidingseveraltestbuttonson this screen. Others Other tabs listed on the Authentication screen include CAS, NTLM, OpenID, Open SSO, and SiteMinder. On the CAS settings screen,youwillhavetoenterthelogin/logoutURLs,theservername, theserviceURL,andotherdetails.OntheNTLM settings screen, enter the IP for the domain controller and the domain name. On the OpenID screen, there are no additional settings. You simply need to enable this option by marking the Enabled check box. On the Open SSO screen, enterinformationsuchasthelogin/logoutURLsandserviceURL,aswellasattributesfor screen name, e-mail address, first name, and last name. CHAPTER 3 ■ MANAGING PORTAL USERS 90 Default User Associations You can set the default associations for the newly created users in the Default User Associations screenunderthetop-levelSettings tab in the Enterprise Adminapplication(seeFigure3-24). Figure 3-24. Setting default associations for a new user Here, you can enter the default community names in the top multiline edit control. In the case of multiple community associations, you enter each community name on a separate line. The newly created users will be automatically associated with the communities listed here. In the second multiline edit control, enter the roles to be associated with the newly cre- ated user. The two default roles are Power User and User. You also saw two Liferay-defined roles, Administrator and Guest; you can add these roles here if you wish to associate them with the new user. In the third multiline edit control, enter the names of the groups that a new user will belong to. Reserved Screen Names On the Reserved Screen Namesscreen,youcanreserveoneormorescreennamesande-mail addressestopreventnewusersfromsettingupaccountswiththosevalues. CHAPTER 3 ■ MANAGING PORTAL USERS 91 Mail Host Names ClicktheMail Host Names tab to list additional mail-host names. Note that you already set the main Mail Domain in the General subscreen within the Settings screen (see Figure3-20). Email Notifications The Email Notifications screen has three subscreens: General, Account Created Notification, and Password Changed Notification.ClicktheGeneral tab to set the sender’s name and e-mail address for account-related messages generated by your portal. In the other two subscreens, you’ll find Liferay’s default notification templates for messages confirming that a user has created an account or changed a password. The Account Created mail-notification template isshowninFigure3-25.Youcanmodifythemessageusingthevarioustermsdefinedunder- neath the text editor. Figure 3-25. E‑mail template for Account Created notification Supposethatouradministrator,Anita,createsanewuser.Thatuserwillreceiveane-mail notificationasshowninFigure3-26.YoucanmodifythePassword Changed template in a similar manner. CHAPTER 3 ■ MANAGING PORTAL USERS 92 Figure 3-26. E‑mail notification message about a new account ■Tip If your machine has an SMTP server running locally, the default portal configuration will use it. If you wish to use a different server to send the e-mail messages, then you must edit the ROOT.xml file located inside your portal installation under conf/Catalina/localhost and register your server there. Editing Settings for Default Plugins Finally, you can configure the defaultpluginsthatwillbeavailabletoyourportalusers. Remember that plugins are basically the portlet applications that the user can install on her pages. Using the Plugins tab, you can configure what portlets, themes, layout templates, and other plugins your portal users are allowed to use depending on their roles. Here, for example, you can determine that power users can access only certain themes and add only certain port- lets to their pages. Under the Enterprise Admin application’s Pluginstab,youhavefivesecondarytabs:  • Portlet Plugins  • Theme Plugins  • Layout Template Plugins  • Hook Plugins  • Web Plugins CHAPTER 3 ■ MANAGING PORTAL USERS 93 The Portlet Plugins subscreenisshowninFigure3-27. Figure 3-27. List of default portlet plugins Here, you will find a list of portlet plugins arranged alphabetically. These are Liferay Core Plugins,soyoushouldleavethemasActive.However,youcansettherolesunderwhichthese applicationswillbemadeavailabletoourusers;theserolesarelistedinthethirdcolumnof thetable.Clickapluginnametoaccessascreenthatletsyouchangetheplugin’sdefaultset- tings. For example, when you click the Activities portlet link, you will see the screen shown in Figure3-28. Inthemultilineeditcontrol,youwillfindthelistofrolesunderwhichthispluginisavail- able.Changethislisttomeetyourrequirements.Todeactivatetheplugin,unchecktheActive check box. Similarly, you can repeat this same process to change the default settings for other types of plugins such as themes and layout templates. [...]... a list of its threads (see Figure 4- 13) and then select the thread that you want to move 115 116 Chapter 4 ■ C R EA TING DIS C U S S ION FOR U M S    Figure 4- 13 Moving a thread to another category At the top-right corner of the screen, you will notice the Move Thread button Click this button to get the Category selection screen as shown in Figure 4- 14 Figure 4- 14 Selecting a destination for your... Firefox Figure 4- 6 RSS feed view C hapter 4   ■ C R E A T I N G D I S C U S S I O N F O R U M S    You can sort the feed output by date, title, or author You and your users can subscribe to this feed by clicking the Subscribe to this feed link (see Figure 4- 7) Figure 4- 7 Subscribing to a live feed You need to enter the name and the folder for the feed Once you subscribe to a feed, the portal displays... Figure 4- 4 displays a list of currently assigned permissions under Regular Roles Note that our guest user has only the View permission If you want to change a guest user’s permissions, mark the check box in front of the Guest user listing and click the Update Permissions button You’ll see the screen shown in Figure 4- 5 C hapter 4   ■ C R E A T I N G D I S C U S S I O N F O R U M S    Figure 4- 5 Selecting... access rights to them For the securities portal, you’ll initially create two discussion categories: Fundamental Message Bulletin and Technical Message Bulletin Click the Add Category button in the Categories menu option to create these categories You should see the screen shown in Figure 4- 2 101 102 Chapter 4 ■ C R EA TING DIS C U S S ION FOR U M S    Figure 4- 2 Adding a new category Here, you will... is allowed to perform depend on his or her role in the community You can control these permissions through the Permissions menu option; when you click it, you will see the screen shown in Figure 4- 4 Figure 4- 4 Updating user rights You’ll see two tabs onscreen: Regular Roles and Community Roles I’ve already listed the possible community roles: owner, administrator, and ordinary member A guest user is... Communities Portlet To install the Communities application on your portal page, follow these steps: 1 Navigate to the portal page where you wish to add the Communities application 2 Select the Add Application menu from the Welcome drop-down list 3 Locate the Communities application under the Community category 4 Add the application to the portal page Your screen at this stage should look like the one... use Liferay s Enterprise Admin and Communities applications to manage your portal s users Enterprise Admin allows you to create organizations, users and user groups, roles, password policies, and so on Communities allows you to create user communities and associate users with those communities First, you defined a multinational organization as owner of the International Security Investors (ISI) portal. .. forums so your portal s users can discuss matters of interest 97 CHAP TER 4 Creating Discussion Forums I n the previous chapter, you created an organization and added a few users to the securities portal Because these users will be investing in stock markets, they will likely seek information from informal discussions in user communities, including recommendations from investors and others Our portal certainly... Tagging contents • Configuring message boards 99 100 Chapter 4 ■ C R EA TING DIS C U S S ION FOR U M S    Setting Up a Forum The Message Boards application that you’ll use to set up the portal s discussion forum is listed in the Collaboration category To use this application, first set up a new page for the discussion forum: 1 Log in to our ISI portal using the Admin account 2 Add a new page called Forum... “Category Actions,” and in the “Permissions on Categories” section after that.) C hapter 4   ■ C R E A T I N G D I S C U S S I O N F O R U M S    After assigning the desired rights to the two kinds of users, click the Save button You’ll see the screen shown in Figure 4- 3 if your request processed successfully Figure 4- 3 Listing all categories You can now see the newly added Fundamental category in the . 3 ■ MANAGING PORTAL USERS 84 Establishing Password Policies Bythistime,youhavecreatedanorganizationandaddedseveraluserstoit.Eachofthese users will log on to our portal using. administrator- assignedpasswordforever.Infact,yousawearlier(inthe“PasswordSettings”sectionunder “CreatingUsers”)thattheadministratorcanforcetheusertochangeherpasswordduringher firstlogin.However,weneedbetterpasswordpoliciesthanthistoensurethesafetyandsecu- rityofour portal. Liferay providesadefaultpasswordpolicyandalsoallowsyoutocreateyour own policies for securing your portal. To edit the existing password. under the Community category. 4. Add the application to the portal page. Your screen at this stage should look like the oneshowninFigure3-29. CHAPTER 3 ■ MANAGING PORTAL USERS 95 Figure 3-29.