Discussions
Security hole - Customer Center?
Tell me if this sounds right for access privileges and likely security hole in the customer center:
1. Create a category (call it CATEGORY A):
- display in website =TRUE
- audience = NONE
2. Create a topic (call it TOPIC A) and fill it with Solutions
3. Publish TOPIC A to CATEGORY A:
- audience = selected specific customer center roles
Now proceed as follows:
a. Enter the customer center as a guest (not logged in). Click on CATEGORY A (because you set it up to be public accessible). You DO NOT see TOPIC A (which is correct since TOPIC A has a specific audience).