iNotes Compose security problem with ultra lite mode, ..&ui=dwa_ulite

Domino server R 8.5.1 and browser IE 8 or Firefox 3.6.

Anyone found this problem when using iNotes in ultra lite mode and changing URL to other mail db.

Yocu can Compose and send mails ?

eg.

http://imail.mydomain.de/mail/mymail.nsf/iNotes/Mail/?OpenDocument&ui=dwa_ulite

change to:

http://imail.mydomain.de/mail/mybossmail.nsf/iNotes/Mail/?OpenDocument&ui=dwa_ulite

All Docs - Compose, document icon with star, and create and send mail.

My ACL is Default as No access but able to read public documents.

On my own domain I have to maka a login but by searching on Google I can find several places where I can send from without any prompt for login.

Found this one:

http://www.badkey.com/db/blogsphere.nsf/d6plinks/JWIE-7J6BZ7

To disable ultralite mode, set the notes.ini variable iNotes_WA_Ultralite=0. The default is 1

BR

Mov V. Hansen

Subject: iNotes - Ultralite mode

It’s fixed in R 8.5.2, SPR# ALAS85J5A4.Test done OK.

BR

Mov V Hansen

Subject: Email me directly with details

andy@us.ibm.com