Hi,
We create some page and assign some regular role permission on those pages. And remove all other permissions like community members or users. And when your is getting inside the portal if don't have that role for which we assign it for that page, not able to see that page in drop down. Till that is fine. But when he got the direct URL of that authorized page and put in the browser request, he'll able to go on that page even he don't have the same role which is assign for that page.
Is we are doing something wrong? we are not using any group permission we are using only regular roles for page permission.
Is there any method in API to check with USER ID an request URL values that this user having permissions for that Page or not. We wants to check that in some filter class so that we can restrict that user if he don't have permission. We tried to use PermissionServiceUtil.getService().hasUserPermission(user_Id, ActionKeys.VIEW, Resourceid);.
But this will only check that this user having permission on this or not. But we gave permission through the Roles only, that's why it's return false even if that user having the same role.
-- Ajay
