Issue

User-restricted pages display in navigation. For example, you have a restricted section is your intranet/Internet. User A is denied all access rights from the page P1 and user B is allowed read and write access rights to page P1.

You have a navigation component:

  • User B requests page P2, which is on the same level as page P1. Navigation lists page P1.
  • User A requests P2. Navigation lists page P1, although the user was denied.

Solution

Do one of the following:

  • Do not cache any HTML.
  • Do not cache HTML if a page is in a specific part of the tree.
  • Use a Server Side include.
  • Use an Ajax request to include the piece that is "dynamic."

Additional information

This behavior is expected. In this case, the first request that user B made, cached the page. Because the navigation component is part of the page, it is delivered directly from cache without recalculating for the second user.

Эта работа лицензируется в соответствии с лицензией Creative Commons Attribution-Noncommercial-Share Alike 3.0 Unported  На посты, размещаемые в Twitter™ и Facebook, условия Creative Commons не распространяются.

Правовые уведомления   |   Политика конфиденциальности в сети Интернет