Hi,

Whenever the page view roles are changed the page must be re-indexed in the search index. We store the page view roles also in the search index in order to filter out results that a user has no permissions for. Based on your other forum posts I would say that your index was not working due to file system permission problems and now you need to rebuild the search index to make it in sync with current permissions.

However, even if the search results showed a link to a protected page the user would not be able to visit the page unless he is in an allowed view role. The search index has no control over page security and whether you click a link or manually type in an url does not make a difference the page security will be applied. I cannot reproduce any problem that allows access to view a page that the user is not in an allowed view role for. The only thing I can think of where that would be possible is if you have the page configured to allow browser caching and if the user visited the page before you changed the view roles then he may be able to view the copy of the page from his browser cache.

Hope that helps,

Joe