Important security issue

Hello, 

I'm on bOS client 4.8.16 and server 4.11.8

I have a frame with the following Security settings : 

Admin : False

Users Everyone

Hidden False

Locked True

When I try to access it, a screen requesting a pin code does appear. BUT you can get rid of id just by clicking the upper right cross (close window) and access the screen without entering the pin code !! That shouldn't be possible. 

ok, there is a workaround using different users and the Security / Users feature ; but that's not the way I'd like it to operate. 

Kind regards, 

François