Notify not playing well with Organic Groups

Capnj - December 13, 2005 - 03:33
Project:Notify
Version:4.6.x-1.x-dev
Component:Code
Category:bug report
Priority:critical
Assigned:Unassigned
Status:duplicate
Description

Creation of a forum topic restricted to an OG was sent out to all users with Notify turned on. Was not restricted to members of the group. They could not access the node, but the notification went out. Not good.

I had previously reported that the mere creation of a group also goes out via the Notify module. I submit that anything to do with a group should not be picked up by the notify module.

gil

#1

Capnj - December 16, 2005 - 02:00

Bumping.
This is a truly critical thing where Notify.module sends out both the creation of a group, and the creation of a topic in a group forum, to everyone getting notifications.

Not good because the mere existence of a group could be something intended to be kept private from non-members; and the creation of a particular topic within a group forum could be even more sensitive.

Bumping this because it did not seem to get any attention.

gil

#2

RobRoy - April 20, 2006 - 19:32

Just took over notify. Will check into this.

#3

RobRoy - August 11, 2006 - 19:58

The new DRUPAL-4-7 branch passes everything through node_load() and user access perms, so this should be working well now. Can you test it?

#4

RobRoy - September 28, 2006 - 17:33
Status:active» duplicate

Duplicate of http://drupal.org/node/75858.

 
 

Drupal is a registered trademark of Dries Buytaert.