Liferay is easy: June 2015

Create Custom Permission and Show/Hide Content on the Basis of Permission by Using Permission Checker

Today we will discuss How to create our own Custom permission in Liferay and then Show or Hide content on the basis of Permission associated with the User. Also we create model level permission so that Permission can be apply to a particular Model. Before reading this you must know how to create Services for this you can read my previous blog Service Builder in Detail and how to create Role and assign user to that role for this you may refer Role Creation.

Lets Start this step by step:-

Step 1:-Create Project and service.xml
Create a Liferay Project and then create a generic Portlet in it.Then You can create service as mention in my previous article Service Builder in Detail .

service.xml

Step 2:-Create default.xml
Create a folder resource-actions inside src. Inside this folder create a xml file default.xml and paste this content:-

default.xml

Explanation :-

1) <portlet-resource>

Inside <portlet-resource></portlet-resource> tags we define permissions at Portlet Level.
Inside <supports></supports> we define actions keys like ADD_EMPLOYEE.
View,Configuration,Add to page these permissions are already provided by liferay no need to define these again.
<guest-defaults> and <guest-unsupported> tags are used to define that guest User can see portlet or not. In this we disable guest unsupported so without login no one is able to see the portlet.

2) <model-resource>

Similar to portlet Resource but here permission is applied for model.
Inside <model-name> we pass the complete path of model class.

Step 3:-Provide entry of default.xml
We have to provide entry of default.xml to liferay so create portlet.properties file inside src and paste this content:-

include-and-override=portlet-ext.properties
language.bundle=content.Language
resource.actions.configs=resource-actions/default.xml

After that create a folder content and inside this create Language.properties in it and paste this:-

action.ADD_EMPLOYEE=Add Employee

Here note that we create permission with ADD_EMPLOYEE but map with action.ADD_EMPLOYEE because liferay create permission with prefix action.

Check Point:-

Deploy the project and go to control panel-->Roles-->Create New Role with name Custom Permission-->Go to define Permission and search for our Portlet ie demo

As you can see we create two types of permission portlet level and model level also you can see that Configuration and Add to page automatically created at portlet level.Just Check Add Employee, Configuration and View and Click save.

Now you have a Role(Custom Permission) which contain 3 permissions. Now Create a User with name Custom and assign Role (Custom Permission) to it.

For Detail how to create a Role and Assign Permission just check my previous blog Here.

Step 4:-Check Permission in Controller Class
Open Demo.java Class and paste this Content:-

Demo.java

Explanation:-
Here we use PermissionChecker class hasPermission() which return boolean we print message on the basis of result.

Note that We use permission that is mention in defaut.xml as ADD_EMPLOYEE rather than Add Employee which is mention in Language.property file.

Step 5:-Check Permission in view.jsp
Sometimes we Show/Hide Content on the basis of Permission in jsp so open view.jsp and paste this:-

view.jsp

Explanation

Here we use theme object which provide us portletDisplay and scopeGroupId objects.
Also we use JSTL so we have to provide entries in liferay-plugin-package.properties file.

Step 6:-Check Output
Now Deploy the project and hit the browser:-

Output 1:- When User not logged in

Because in default we disable view for Guest. ie
<guest-unsupported>
<action-key>VIEW</action-key>
<action-key>ADD_EMPLOYEE</action-key>
</guest-unsupported>

Output 2:- When User logged in as Admin

On Console message appears as: Can Add Employees

Output 3:- When User logged in as Custom(the user which has Custom Permission role)

On Console message appears as: Can Not Add Employees

Now Only One thing is remain if you want to use Model level permission for role checking then you have to add resource each time you add model object and delete resource each time you delete model.So lets see how to add Resource and delete Resource with model.

Step 7(Optional):-Add/Delete Resource with model
Now open EmployeeLocalServiceImpl and create a method addEmployee and inside this use addResources. Syntax of addResources is:-

public void addResources( String companyId, String groupId, String userId, String name,
String primKey, boolean portletActions,boolean addCommunityPermissions, boolean addGuestPermissions);

portletActions=>true(if you're adding portlet action permissions)
false(if you're adding Model resource permissions)

addCommunityPermissions=>Default permission for Group
addGuestPermissions=>Default permission for guest User.

So from your add method call it as:-

ResourceLocalServiceUtil.addResources(employee.getCompanyId(), employee.getGroupId(), employee.getUserId(),Employee.class.getName(), employee.getEmployeeId(), false, addCommunityPermissions, addGuestPermissions);

And From Delete method call it as:-

ResourceLocalServiceUtil.deleteResource(employee.getCompanyId(), Employee.class.getName(),
Resource.SCOPE_INDIVIDUAL, employee.getEmployeeId);

Project Structure:-

You can Download Source code from Create Custom Permission in Liferay

Hope this will Help....

Permission in Liferay

Today we will discuss Permission in Liferay. Permission in Liferay is a Complex topic itself so today we discuss just basic of permission System. In Liferay we have :-

Users
One User can have multiple roles.Ex- Admin,Guest,Owner, PowerUser etc.
One Role can have multiple permissions.Ex- View,Add Site,Add Role,Add Users etc.

Permission are combination of Resource and Action.

Resources are of two type:-

1)Portlet Level <portlet-resources>
Portlet level Resource are those by which User can perform some action with the each portlet window. Ex-

2)Model Level<model-resources>
Model level Resource means User can perform some action with the model object ie at Service layer. At model level resource action can be categorized in two level as:-

Top Level Action=> They are not applied to particular model Ex- Addition of employee.
Resource Level Action=>They are applied to particular model.Ex- Delete a specific employee.

Liferay provide some default permission like View, Configuration etc in next blog we create our own Custom Permissions like Add Employee and also create model level Permissions.

Hope this Help....

Control Panel Permission in Liferay

Today we will discuss how to handle Control Panel Permission in Liferay.Before reading this you must know how to create a particular role and how to assign Users to it.For this you may refer my previous post here.

Today we will create a User that can do all the control panel task except he can not create Sites and Roles.

So Lets start this step by step:-

Step 1:-Create Role
Sign in with test@liferay.com(Admin) then Go to Admin then control panel inside User section click roles then click on Add . Then you select Regular role and provide all the information as:-

For detail of how to create roles you may refer here.

Step 2:-Assign Permission to the Role
Then click the particular role Action Button and select Define permissions and select all the permissions except Roles and Sites as:-

and then click save.Here you can control that a particular role can create web content or not and many more permissions.

Step 3:-Create User and assign Role to that User
First create a User by Go to Users and Organization Section and create a regular User.Here i am creating a User with Control name,
and control@gmail.com as id. For detail explanation of how to create User you may refer here. Then Go to Control Panel Testing Role created in previous step and assign the User as:-

Step 4:-See Output
Logout from Admin and sign in as control@gmail.com and go to control panel and see the out put as:-

Here you can see there is no Roles in Users section and no sites in Sites section. I also remove some features from Apps and Configuration also.

Hope this will Help....