I retrieved the latest (Head/2.4) code from CVS this morning.
Initially, this scenario caused runtime JSP errors:
1. log in as admin
2. go to the management tab
3. logout

The JSP errors can be fixed by changing AdminCMSConstants (wrong class name) to CMSAdminConstants in:
portal-core-war/WEB-INF/jsp/permission/forbidden.jsp (1 occurrence)
portal-core-war/WEB-INF/jsp/cms/admin/normal.jsp (9 occurrences)

However, after fixing the JSPs, the behavior is still not correct when I perform the 3 steps listed above. The management portlet is still visible and usable after I logout.

Is this a real issue or did I just pull code from CVS at an inopportune time?

Thanks,
Scott Dawson
Unisys