Re: [security-dev] SPFilter should check principal in POST calls