Affiliate Management page can not be protected, but must be.

When 1.7 was pushed to production we realized at than visitor can view and operated the Affiliate Management page. This is a significant security problem. We then changed the access rights to this page (Not the Affiliate space, but the Management page- http://www.curriki.org/xwiki/bin/view/Affiliate/AffiliateManagement )

When we did this, visitors and non admins could no longer view the page BUT the Affiliate partner registration pages could not either so they stopped working (Giving an "Affiliate Partner does not exist in our Database" error.) We need to be able to res tic access t the AffilaiteManagement page without breaking the Affiliate registration pages. Also we should protect the Affiliate space to Admins and a Affiliate group so only partners have access.