In local development, changed item to OwP but can still access image directly from another browser that is not logged in. I see expected messages in Blacklight and cannot access the manifest ("unauthorized"). I can't replicate this in UAT.
I don't see any sign of the authorization check being called. Is this expected in the local environment?
Story
In local development, changed item to OwP but can still access image directly from another browser that is not logged in. I see expected messages in Blacklight and cannot access the manifest ("unauthorized"). I can't replicate this in UAT.
I don't see any sign of the authorization check being called. Is this expected in the local environment?