We've got sitemaps using the roles attribute in our website - -
It works fine for any normal web file (.aspx) - if not logged in, the user gets redirected to the login page.
However, with any sitemap node (using the same roles), that has a PDF file as a url, the user is allowed to go directly to the PDF, bypassing the login page.
How is this possible, and can it be fixed?
...
Go to the complete details ...