Mailing-List: contact jetspeed-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jetspeed Developers List" <jetspeed-dev@jakarta.apache.org>
Message-ID: <001701c21093$fa2438f0$fae0fea9@development>
From: "Mark Dimon" <mark.dimon@btinternet.com>
To: <jetspeed-dev@jakarta.apache.org>
Subject: jetspeed security broken [non-existant] nightly build 2002-06-09
Date: Mon, 10 Jun 2002 16:32:05 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0012_01C2109C.5BB31200"

------=_NextPart_000_0012_01C2109C.5BB31200
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

If you fire-up the lastest nightly build and type the url

http://localhost:8080/jetspeed/portal/user/admin
the you go straight to the admin screen even though you are a logged out =
anon user,

none of the portlets are active or will display there contents , but =
this is surely wrong should you not be sent to the anon psml.

also

http://localhost:8080/jetspeed/portal/user/turbine

takes you straight to the turbine users screen , you can't edit the =
portals but you can still see the information directed to a particular =
user.=20


Is this due to the CVS being in a state of flux at the moment , or is it =
a bug?


Regards mark.


------=_NextPart_000_0012_01C2109C.5BB31200--