Sys op: Server Win 2003 - Client Vista
Database: SQL
mojoPortal: 2-3-0-8
Browsers: IE 8, Firefox 3.0.11, Google Chrome 2.0.172.31

Hi Joe!

I've Just upgraded mojoPortal to 2.3.0.8 (pls. check your mail for translation updates).

After activating the new search features and rebuilding tha search index I have noticed that Webstore Products are included in search results for anonymous users even if webstore module is set to show only to registered users.

Both "hide to anonymous" and security settings "role that can view content = Authenticated Users" are selected and I think this should prevent anonymous users to see products details (as they cannot access the WebStore).

Note that I definitely want to include Products in search results but our WebStore should be reserved to our Community members who register.
Hiding just offer prices would be ideal but I'm not sure it is possible with current version.

Anyway, with my current settings, the new search feature causes the disclosure of information that is supposed to remain restricted to specific roles or, at least, should be shown only after registration.

Thanks.
Diego 

Ouch!

that also means I should review the logic of all site pages for sites where I use module security settings to show different content on role basis. For Example Shared Files but also simple HTML sections.

I think module security is a "plus" for mojoPortal and gives control and flexibility on the page content.

If module security is by-passed by the internal search engine I should really think whether to disable search engine for some or all features or re-disign the site hierarchy to downgrade security at page level only.

Please, let me know in case in future you reconsider the possibility to support module security on search feature.

Resource Blender: Yes, it could be useful to share resources on a service web. Let me know If/when you want to try the tool.

Thanks, it would be great!

In the meantime, for your information, I have tested two different behaviours with different modules: WebStore Products and Shared Files.
Actually, the behaviour is the same but modules work differently with different results on information access.

With both, as said, the search result list includes content that is protected to anonomous by role at module level but when you click the link in the list:

• For WebStore Products the result link opens the Product Page that is supposed to be hidden
• For Shared Files the result link (to a PDF Document) opens the page that contains the module and triggers the module security that prevent the user to access the document itself.

For the moment therefore I decided to keep the site hierarchy as is and to exclude product from Searched features.
If, in future, search feature will apply module security as well, I will re-enable products.

Thanks and regards.
Diego