URGENT: Bug in Maximum Internet Access on DWA access?

Hi all,

Seems I got a bug on Domino 6.5.3 and 6.5.3FP1 on iSeries but need a confirmation. If somebody could confirm this.

If you set in the ACL on a user’s mail file (template is inotes6.ntf) Maximum Internet name and Password to No Access and try to access his database via a browser (DWA), you are able to see his calendar entries and even post calendar entries.

Seems very bad for me. Sure you first need to authenticate but that’s about all. You are still able to access the mail file and to see all the calendar entries.

I tested this on Windows versions and the problem seems to be inexistant there. Only iSeries seem concerned.

Thanks for your help.