Our website has a "For members" page. Among other things, it includes the names and contact details of members. To access it, members must log in, which only members can do. However, I've found that without logging in, if I enter a name in the Search box, details of that member are displayed.
Interesting, that seems like a bug to me. Although the system doesn't let you view the search result, it shouldn't show it at all if you don't have permission to see the page.
I'll fix this soon and let you know when it's done.
Thanks
Joe - Voice Admin
This is now fixed for all sites - thanks for letting me know of the problem!
Pages now correctly only show in the search results if the searching user has permission to read them. (previously it would show in the results but require login if the user clicked on it)
Thanks
Joe - Voice admin