Private pages accessible when not logged in

[11年前 に Trey Howard によって更新されました。]

In 6.0 our site automatically redirected to a default/login page if a user tried to access a hidden page when not logged in.
These same pages now display for guests, with some of the portlets displaying 'not authorized' messages.
Some of our portlets do not have the security check and so are displaying sensitive content to guest users.

Is there a way to re-enable the old security model so hidden pages cannot be viewed by guests?

Any help is greatly appreciated!

-Trey

[11年前 に Hitoshi Ozawa によって更新されました。]

This is a know problem. I think there were other related problems with permission of private pages.

http://issues.liferay.com/browse/LPS-24888