[JS2-235] Cleanup PageManager to enforce Page/Folder security symmetrically

• Type: Task
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0-M3
• Fix Version/s: 2.0-M4
• Assignee: W. Randall Watler
• Reporter: W. Randall Watler
• Created: 22/Apr/05 03:15
• Updated: 04/Oct/11 21:37
• Resolved: 19/Jul/05 14:31

Description

PageManager and related implementations do not enforce Page/Folder security constraints/permissions consistantly across all APIs. PageManager.getFolder() and PageManager.newPage() probably need to restrict VIEW and EDIT access assuming an end user is attempting to perform these operations as part of a site management/customization process.

Will need to review site admin portlets to ensure that tightened APIs do not hinder operation.