<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <title>My users can access any community if they know the URL</title>
  <link rel="self" href="https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=466833" />
  <subtitle>My users can access any community if they know the URL</subtitle>
  <id>https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=466833</id>
  <updated>2026-06-01T21:15:21Z</updated>
  <dc:date>2026-06-01T21:15:21Z</dc:date>
  <entry>
    <title>RE: My users can access any community if they know the URL</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=487103" />
    <author>
      <name>Artur Linhart</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=487103</id>
    <updated>2008-02-16T23:23:07Z</updated>
    <published>2008-02-16T23:23:07Z</published>
    <summary type="html">OK, I think for this sitation has been designed the area of the private pages, where no guest can access it... just put the public to the public area of the community and the real pages which have to be protected into the private area... You have then to solve the redirect after logi... But Thi can be done simply so, You put into the public community the pages above, which are only urls to Your pages in the private community - or handle it in some different way...&lt;br /&gt;&lt;br /&gt;  with regards, Archie...</summary>
    <dc:creator>Artur Linhart</dc:creator>
    <dc:date>2008-02-16T23:23:07Z</dc:date>
  </entry>
  <entry>
    <title>RE: My users can access any community if they know the URL</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=486111" />
    <author>
      <name>Jimisola Laursen</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=486111</id>
    <updated>2008-02-15T23:46:14Z</updated>
    <published>2008-02-15T23:46:14Z</published>
    <summary type="html">How do I remove this default behaviour of Guest have view rights everywhere? I&amp;#39;m going to run a site which has front page which is visible to everyone incl Guest, but the rest of the site (Image Gallery, Message Boards etc) are closed.&lt;br /&gt;&lt;br /&gt;Regards,&lt;br /&gt;Jimisola</summary>
    <dc:creator>Jimisola Laursen</dc:creator>
    <dc:date>2008-02-15T23:46:14Z</dc:date>
  </entry>
  <entry>
    <title>RE: My users can access any community if they know the URL</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=470481" />
    <author>
      <name>Tobias Amon</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=470481</id>
    <updated>2008-02-11T13:00:57Z</updated>
    <published>2008-02-11T13:00:57Z</published>
    <summary type="html">Hi,&lt;br /&gt;&lt;br /&gt;Felix you will have to remove &amp;#34;Guest - View&amp;#34; from &amp;#34;Permissions&amp;#34; of any of your community pages. When adding a page a guest does always have the right to view a page. You have to go to &amp;#34;Manage Pages&amp;#34; - Select a page - &amp;#34;Permissions&amp;#34; - &amp;#34;Guest&amp;#34; - Remove &amp;#34;View&amp;#34;. Unfortunately you cannot do this on your community itself.</summary>
    <dc:creator>Tobias Amon</dc:creator>
    <dc:date>2008-02-11T13:00:57Z</dc:date>
  </entry>
  <entry>
    <title>My users can access any community if they know the URL</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=466832" />
    <author>
      <name>Felix Tunbjer</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=466832</id>
    <updated>2008-02-08T16:22:18Z</updated>
    <published>2008-02-08T16:22:18Z</published>
    <summary type="html">Hi!&lt;br /&gt;&lt;br /&gt;I have a setup where the membership of communities are assigned by User Groups. &lt;br /&gt;Now, when guests are logging in or for that matter users not in the to the community assigned user groups, they can still access all communities if they now the URL. To me this is a serious security issue.&lt;br /&gt;&lt;br /&gt;Anyone got an idea how I can restrict access to communities that the user is not a member of?&lt;br /&gt;&lt;br /&gt;thanks.//Felix</summary>
    <dc:creator>Felix Tunbjer</dc:creator>
    <dc:date>2008-02-08T16:22:18Z</dc:date>
  </entry>
</feed>
