Hello,

I apologize if I'm posting in wrong place or wrong method.

I have a private forum set up via Organic Group Forums, which works just fine.
The private forum is not visible except to group members.

However, I noticed that posts to the private forum show up in the Active Forum Topics,
and clicking there will take anyone into the private forum!

Of course, quick fix is to disable "active forum topics" but I kinda like that there. I don't
even mind the topics showing up there, but I don't want clicking the link to let people
enter the private forum.

Any ideas? Am I missing a way to control this?

kai

Comments

mightyiam’s picture

mightyiam commented

I've suggested this http://drupal.org/node/173413. If this is done, it should solve it I think.

kaimuki’s picture

kaimuki commented

Ok, I'll leave the fix to the experts... but is the problem above a known (at least now) bug then? or is something in my setup incorrect.

I also just noticed, that site searches also allow entry into the private forum, even for anonymous users. I suspect this is related to the same access "problem"?

kaimuki’s picture

kaimuki commented

Sorry this is not organized, but upon a little more testing:

I noticed that for OG_Forums only, even if it is marked for
"DENY" to anonymous users, via TAC, anonymous user searches will find hits inside the
OG_Forums. And clicking the hits will take the user right in.

"Normal" forums will not allow search hits into it if "DENY" is set via TAC.

I thought TAC and OG were compatible in Drupal 5, but apparently still some interactions?

I just want to keep private forums private.

rconstantine’s picture

rconstantine commented

Are you using the OG audience targeting system? You need to be. Find it at admin/og/og under "Node authoring form". If the nodes in the forums have an audience set, then they won't be public and will belong to the group. Og_forum checks nodes, no matter how you arrive at them, to see if they belong to a group and denies access if you don't. At least, it's supposed to.

You are using the newest dev, right? I see you indicated so when you marked the version, but I thought there was a previous issue with this that I fixed.

So play with your settings and let me know. Note: you will have to resave any nodes in your forums that you posted previously without the audience system turned on for them to get an audience tie. Behind the scenes, I believe this all adds entries to the node_access table as you would expect.

graemec’s picture

graemec commented

Hello,

I am experiencing the same issue. The forums and forum containers are appropriately hidden but if I copy and paste the node url of a specific topic it is visible. (As well as on the 'Active Forum Topics').

Is this patch only in the 5.x-2.x-dev or is it in the 5.2 release?

rconstantine’s picture

rconstantine commented

Would someone please answer the questions I pose? If not, I can't answer yours!

graemec’s picture

graemec commented

Here's some more info:

Q: Are you using the OG audience targeting system?
A: Yes

Q: If the nodes in the forums have an audience set, then they won't be public and will belong to the group. Og_forum checks nodes, no matter how you arrive at them, to see if they belong to a group and denies access if you don't. At least, it's supposed to.
A: Yes, I'm using audiences, but they have no impact on these forum topics. The forums and containers are private, but the forum topics are not. A user can still access them if they know the url (...or through searching, active forums block, etc)

Q: You are using the newest dev, right?
A: I'm using og_forum 5.2. (...Do I need to be using 5.x-2.x-dev?)

Q: So play with your settings and let me know. Note: you will have to resave any nodes in your forums that you posted previously without the audience system turned on for them to get an audience tie.
A: I've tried turning off audiences, back on, and resaving, with no impact.

Would you suggest that I upgrade, and see if it happens with 5.x-2.x-dev?

Thanks!

rconstantine’s picture

rconstantine commented
Priority: Normal » Critical

Thanks for the answers. I'll look into this, now that I know more. I'm pretty sure I know where to look. I'm bumping this to critical as I need this to work myself.

...Just checked it and I see that you are right. I didn't have an installation (with posts) when you first posted that I could try it out on.

As for which version to use, the project page will always tell you which to use. I think it says to use the dev version at the moment. When 2.0 came out, it said to use that. Now it has changed.

rconstantine’s picture

rconstantine commented
Status: Active » Fixed

Looks like a bug with OG itself. See #5 in this post which details my investigation(?) - fumbling about I mean.

http://drupal.org/node/177626

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)
smanes’s picture

smanes commented
Version: 5.x-2.x-dev » 6.x-2.x-dev
Component: User interface » Code

Make sure that you're using the "Active forum topics in group" block in og_forum, not the "Active forum topics" block from the stock forum.module. The latter has no awareness of organic groups.

The issue with og_forum's block though is that it doesn't report on posts in non-organic forums which is a problem if you have both on your site. I'm working on an alternative module that would do both.