Affects Version/s: 6.1.0 CE RC1
Environment:Tomcat 6.0 + MySQL 5. 6.0.x Revision 88148.
Tomcat 6.0 + MySQL 5. 6.1.x Revision 88148.
Backported to Branch:Committed
If view permissions on a Web Content entry are removed for a certain role, that role can still view the entry in the Web Content Display portlet as long as the portlet itself has view permissions for that role enabled.
1.) Create a WC entry
2.) Disable Guest view permissions for the WC entry
3.) Add the WC Display portlet to a page
4.) Enable Guest view permissions for the WCD portlet
5.) Log out
6.) View the WCD portlet as the Guest user
The portlet will display the WC entry to the Guest user. The portlet has view access enabled, but the entry does not. Normally this would result in a visible portlet with blocked or invisible content.