On Tue, Dec 7, 2010 at 5:33 AM, Louis Smith <[email protected]> wrote:

> However, if you enter a valid ID, and leave the password field blank - you
> are logged on as that user with all their rights and access.

What version of Continuum (and Redback) are you using?  My 1.3.6-based
instances don't behave this way.

The configuration is in conf/security.properties.  Perhaps some
combination of the configurable options has allowed this.

-- 
Wendy

Reply via email to