[jboss-jira] [JBoss JIRA] Updated: (JBPORTAL-2155) Any CMS user can access secured cms items through preview function

Any CMS user can access secured cms items through preview function ------------------------------------------------------------------ Key: JBPORTAL-2155 URL: https://jira.jboss.org/jira/browse/JBPORTAL-2155 Project: JBoss Portal Issue Type: Bug Security Level: Public(Everyone can see) Components: Portal CMS Affects Versions: 2.6.6 Final Reporter: Martin Putz Assignee: Sohil Shah Fix For: 2.6.7 Final Any CMS user is allowed to use the preview function of the workflow if he 1. knows the deep link or 2. has the workflow manager role but has no read, write nor manage privilieges for the corresponding cms item.