[CR #296015] If a portlet is deployed to the default page or to a catalog page, users must have a valid role to view the portlet. If a portlet is deployed to a user page, role checking is performed at the time of deployment; however, if the user’s role is subsequently revoked, the user can still view the portlet because role checking is performed only once for a user page.
Workaround: To ensure that only users with valid roles run a portlet, run the UpdatePages utility after you update a user’s roles. See “Update page utility changes” in What’s New in Enterprise Portal 5.1.
