Comment 2 for bug 239209

I'm not sure what you mean by 'the public interface'?

We have an access controlled document which should be restricted to only being visible on a published web page (via Silva) on devtrain to members of a specific LDAP group. Someone (who is successfully authenticated against LDAP) is not a member of that group can view the same web page and they see the DL link for the access controlled document that they are not intended to see.

We have just created a similar scenario but via devstaff and the same individual could view the web page but could NOT see the access controlled document link - i.e. it worked exactly as expected.

So, the question is - what is different on devtrain which is preventing access controlled document links from working? We will investigate the setup at this end, and report back when we have more information.