[Ejbca-develop] EJBCA newbie: retrieval question

[Benedikt W. <ben...@t-...>]

good morning, why can i retrieve any certificate (even the superadmin)
in ejbca's public web interface without authenitification? am using
ejbca_ce_6_3_1_1, jboss-as-7.1.1.Final, H2,  openjdk-7 on debian 8.
thanx a lot in advance.