add-default-resource 옵션에 대한 설명

the default value is false.

If the add-default-resource value is set to false, 

and the portlet does not belong to the page but has been dynamically added, 

then the user will see that he does not have permissions to view the portlet. 

If the add-default-resource value is set to true,

 the default portlet resources and permissions are added to the page. The user can then view the portlet. Most portlets are harmless and can benefit from this flexibility. However, to prevent security loop holes, the default value is false.