02 Jul 2008
04 Jan 2011
Link to this post
A client of mine just spotted something the looks like an glitch/bug to me.
On the website I have a password protected area (which is working fine) which contains a page with a news control sitting on it. If i try accessing the exact URLs for the news in that are in the protected area, everything works as expected.
There is also a public page on the website the contains news. Please note that:
1) i have double checked permissions
2) categories are correctly set on the news controls and on the pages
Basically, if a user types in the name of the news item that should be protected in the URL (the one that's automatically generated by SF) on the unprotected page, the full news is displayed anyway.
I'll make an example to be clearer:
Protected URL: http://www.someurl.com/extranet/news/10-11-17/protected_news_item.aspx
Unprotected URL: http://www.someurl.com/media/news/10-11-17/protected_news_item.aspx
In the first case the user is correctly redirected to the login screen. In The second example, the user is displayed the news without authentication required. Also, the second case is displaying a piece of news even if it doesn't belong to the categories specified in the filters for the control.
The version of SF is 3.2
Can you please shed some light on the matter?
thanks in advance!