KocsisDaniel/liferay-portal — pull request #150 by vilmospapp (2012-10-24 13:55:21+00:00)
Title: [TECHNICAL SUPPORT] LPS-30589 Added /bookmarks/find_entry to auth.public.paths

Hi Dani,

Based on my investigation I found, that find_* urls are mostly already added to the auth.public.paths property. I've verified that blogs stops working the same way as bookmarks if I remove it's entry from that property.

If a path is not enlisted in that property, then it will be processed in PortalRequestProcessor.processRoles() to verify VIEW permission for the porltet.
The links in Activities portlet that are triggers the above mentioned calls are preverified so the user must have VIEW permission to them.

View permission limitation for display portlets are still work.

Please let me know if you have any concerns.