Page restrictions do not reliably protect linked documents
- Why it matters
- A file can remain reachable by direct URL even when the page that linked to it is hidden or unpublished.
- Recommended action
- Classify restricted documents and enforce access at the file or application layer, not only through CMS page visibility.
