Details
-
Bug
-
Resolution: Fixed
-
Major
-
7.2-milestone-2
-
Unknown
-
N/A
-
N/A
-
Description
A clear example can be observed on the login page for a guest user which has been denied view rights on the entire wiki.
Looking at the page source, we can observe the wiki-level Annotatons JSX and SSX links getting injected in the DOM, even if when those links are loaded by the browser they get a 403 error, since the guest user can not actually access them (no view rights on the document holding them).
This produces no visible issues, except if you use the Network Tab in Firebug to see the actual errors, but it has an impact on the performance of the login page.