Control Access to Portlets
You can control access to portlets by setting access
permissions to specify which portlets are available to which users
and what kind of actions the users can perform on a specific portlet. You
can set access permissions individually for each portlet, or at
the group level.
To add a portlet to a page and access its content, end users need read, execute, and traverse permissions for the portlet.
You can restrict access to portlets temporarily by disabling them. For more information, see Disable an Entry. This may be required when you want to update the portlet producer or modify the portlet settings. When users try to access a disabled portlet from their page, they see a message.
You can also lock the portlet if you do not want users to see the edit button in the portlet. As a result, users cannot see the portlet properties and cannot modify them. For more information, see Modify a Portlet.