Not only is it showing my private forum posts on the front page to unregistered viewers, if I click the link and am not logged in, I can still view the forum! This means even if the Recent Forums Posts thing gets cleared up, the forums still aren't really private and people can guess the URL to get to the private forum topics still.

Comments

salvis’s picture

salvis
he/his
commented
Assigned: Schwallie » Unassigned

Please follow the directions that were displayed when you posted your issue.

(And don't assign an issue to yourself unless you intend to write actual code for it.)

Where is Recent Forums Posts coming from?

salvis’s picture

salvis
he/his
commented

Please try installing the -dev version, which has fixed similar issues for others, and let us know whether this has helped or not.

salvis’s picture

salvis
he/his
commented
Status: Active » Fixed

Actually, go right to BETA4.

Please reopen, if this issue is still present in BETA4.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

mcaden’s picture

mcaden commented
Version: 6.x-1.0-beta3 » 6.x-1.0-rc1
Status: Closed (fixed) » Active

Still active using the tracker module.

It shows recent forum posts - allows users access to posts in restricted containers/forums.

I tried using latest release of ACL and Forum access, and tried using dev.

mcaden’s picture

mcaden commented
Status: Active » Needs review

Changing to 'needs review'.

I'm also using image gallery access and I just noticed an anonymous user can view images in private galleries...

They can't view the gallery...

But if they are supplied with a link directly to that image, they get that image node.

mcaden’s picture

mcaden commented

#493044: Permissions not set properly - Possible solution

salvis’s picture

salvis
he/his
commented
Title: Recent Forum Posts showing private forums to unregistered users » Permissions not fixed by upgrading FA — need to rebuild permissions!
Category: bug » support
Status: Needs review » Active

If rebuilding permissions fixes your nodes, then there is/was a problem with setting the permissions. This may be due to an older version of FA (and also IGA) and it should be fixed now, but nodes that were created while the older version was installed may not have the proper permission records. Updating FA and IGA doesn't automatically fix those nodes.

Since you rebuilt permissions, all evidence has gone, and there's nothing we can do anymore, unless this issue pops up again. If that happens, then please reopen this issue, open the Trouble-shooting node access fieldset on the forum administration page and follow the instructions there, with one node that doesn't behave as expected — BEFORE (and after) rebuilding permissions.

salvis’s picture

salvis
he/his
commented
Version: 6.x-1.0-rc1 » 6.x-1.0-beta3
Status: Active » Closed (fixed)

@mcaden: Please follow up in the other thread.