Details
-
Bug
-
Status: Closed
-
Resolution: Fixed
-
6.2.X EE, 7.0.0 M5
-
6.2.x
-
Committed
-
9
-
4
Description
Guest users accessing directly a private site page of type "Link to URL" are able to overcome portal authentication and are redirected to the linked URL.
Steps to reproduce:
- Add a private page to your site with Name="URLPage", Type="Link to URL" and URL="http://www.google.com";
- Sign out;
- Enter the URL http://localhost:8080/group/guest/urlpage;
Expected result:
As the user is not authenticated, he should not be able to access this portal private resource and should be redirected to the login page.
Actual result:
Even though the defined page is private, guest user accesses it and redirection happens.
Attachments
Issue Links
- causes
-
LPS-54747 The "Link to URL" page is pointing to the wrong URL
- Closed
-
LPS-54882 Regression introduced by LPS-54433
- Closed
-
LPS-55870 NPE thrown when reminder emails have to be sent
- Closed
-
LPS-56104 Guest users unable to see content with remote live staging, and page versioning enabled.
- Closed
-
LPS-56266 NPE is thrown when navigating to /web/guest/ and SecureFilter is disabled
- Closed
- relates
-
LPE-13672 Private page of type "Link to URL" is publicly available
-
- Closed
-