[CR #296015] If a portlet is deployed to the default page or to a catalog page, users must have a valid role to run the portlet. If a portlet is deployed to a user page, role checking is performed at the time of deployment; however, if the user’s role is subsequently revoked, the user can still run the portlet because role checking is performed only once for a user page.
Workaround: To ensure that only users with valid roles run a portlet, deploy portlets for which role revocation is important in Catalog or Default pages rather than in the portlet catalog.
