On Thu, Dec 8, 2011 at 10:51 PM,  <[email protected]> wrote:
> Mike,
>
> Good catch.  I thought I had nailed all these down, but this version does
> look like if you are authenticated and know the URL, it would let you go
> places you shouldn't be allowed.  Let me go back through my latest
> customized version and compare.  There should be checks that will boot you
> back to the home page (or was it the login page?) if you try to view a page
> you're not supposed to be allowed to access.

You may want to check how restricted="true" is implemented for Border
component e.g.
<div jwcid="@common/Border" restricted="true" borderTitle="ognl:borderTitle">

George
_______________________________________________
sipx-users mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-users/

Reply via email to