Just noticed this odd behaviour. I have a login design that uses some global keywords, of the following forms:
%asset_url%
%globals_asset_url:1234%
./?a=1234
All these replacements work fine when attempting to view an asset I don't have permissions to (e.g. as a public user). However, if I access the secure asset (well, any asset really) via /_login, then none of the replacements work anymore. It prints out the keywords verbatim, percentage signs and everything.
(Interestingly, the ./?a= syntax still get the file eventually - but I think it's making a double round trip).
Couldn't see anything about it in the bugs or roadmap.
Thanks Bart. I seem to recall a similar thing for _edit, might even have been me who raised it. Our next upgrade will be to Matrix 5, later this year possibly.
As always, thanks for the fast replies! I think these forums are invaluable.