I use tac_lite to hide forums from certain users. When I go to test it the users who are not supposed to access certain forums cannot do so and also cannot see those. Fine.
But when I use www.url.com/forum/1 and switch up the numbers in the back, every user is able to find out about other forums. Although the content doesnt show, which is nice. What they get is the name of it at the top.
What I am wondering about is, if this is the way Dave wants to have it or if it is possible to completely deny users from knowing anything else exists.

Comments

Dave Cohen’s picture

Dave Cohen commented
Status: Active » Closed (won't fix)

I think you need to submit a feature request to the forum project. This has to do with forum module code (or possibly taxonomy module?)

tac_lite provides a hook_db_rewrite_sql() that hides taxonomy terms from users who should not be able to see them, but it only works when db_rewrite_sql is called with a primary field of 'tid'. I think some of the queries in forum module use joins between taxonomy and node and basically get around this feature.