Read Only Presentation Objects

The Read Only property can be set on any IFS presentation object to ease the tedious task of granting/revoking presentation object security. Setting this property will make the relevant object ONLY possible to VIEW.

Considerations

By default its possible to set the read only property to any IFS presentation object. But there are certain cases where this is not applicable. In such situation the developer should instruct the scan tool that this presentation object should NOT have the possibility to be set as read-only.

Annotating classes with FndSecurityAllowReadOnly

Developers can use the FndSecurityAllowReadOnly class level annotation to set whether or not this page should have the possibility of setting the read-only presentation object property. If not present the value defaults to true. If page should not act as default then the class should be annotated with false value.

@ifs.fnd.annotation.FndSecurityAllowReadOnly(false)
public class BulletinBoardAddMessages extends ASPPageProvider

other possible values (both these have the meaning "true"):

@ifs.fnd.annotation.FndSecurityAllowReadOnly(true)
@ifs.fnd.annotation.FndSecurityAllowReadOnly