Liferay JSF Portlet Security

[Sreeraman A, modifié il y a 10 années.]

Hello,

How does liferay implement security for JSF portlets? In otherwords, does liferay implement OWASP standards to protect JSF portlets? If so, is there any configuration required for enabling it?

Thank you...

[Neil Griffin, modifié il y a 10 années.]

JSF portlets do not differ from plain Java portlets with respect to security. The web page for Liferay Portal EE indicates:

Liferay Portal EE implements the Top 10 recommended best practices published by the OWASP organization.