/Share/Service/Index open to public

[iseyfi]

We are using Alfresco 3.3. We just realized /share/service/index is open to public. Anyone can get to it. They are able to list, update, download and refresh scripts. This does not seem to be the case with /alfresco/service/index.

Does anyone know if there is a quick workaround to this problem? This also brings another question whether any of the Share web scripts authentications are working.

[mikeh]

It's fixed on 3.3G, to be released this week. Having said that, there's not much of a security risk as all data REST APIs are via the Repository, which ensures the user is correctly authenticated.

Just one clarification: users can't update scripts via the /share/service/index

Thanks,
Mike