So I have Similar Entries displayed in the sidebar and a couple of private forums using forum access.

Issue: Private node's title's are pulled into the block. (I.E. No user check is preformed?)

Comments

czarphanguye’s picture

czarphanguye commented
Priority: Normal » Critical

After a few days... I'm changing to critical. This 'bug' could lead to some big issues if someone is unaware that the private forum is being 'leaked'.

deekayen’s picture

deekayen commented
Version: 5.x-1.2 » master
Category: bug » feature
Priority: Critical » Normal
Status: Active » Postponed

Forum access isn't a core module. Trying to support every third party module is an unreasonable task. I'll leave it open as a request to support checking against ACL's rules, but that also means adding checks for OG and node_privacy_by_role style rules, too.

deekayen’s picture

deekayen commented
Status: Postponed » Closed (duplicate)

I'm willing to consider a patch for joining against the node_access table over at #261821: Join on node_access when querying similar entries