wtijsma
-
5/12/2005 4:07:16 PM
Question About CMSViewer Caching
Hi Petr,
I haven't tested it yet so I'm not sure of this, but shouldn't the caching mechanism include the CheckPermissionForUserID parameter when generating the cache key, to prevent anonymous users being able to view content only available to signed in users (or something similar )?
useCacheItemName = this.Context.Request.Url.ToString() + "|" + this.ID;
to
useCacheItemName = this.Context.Request.Url.ToString() + "|" + this.ID + "|" + CheckPermissionsForUserID;
Wiebe
|