The PortletPreferencesServiceImpl will have some additional options available via bean properties; first to just not store portlet prefs for guest users, second to store them in the guest user's session so they are scoped and disappear at the end of their session, third to leave the functionality as is.
If this sounds reasonable I'm also wondering how we define who a guest is. Should the code check IPerson.isGuest() or IPerson.getSecurityContext().isAuthenticated()?
-Eric
smime.p7s
Description: S/MIME Cryptographic Signature
