Posted by Schwallie on May 18, 2009 at 8:32am
Jump to:
| Project: | Forum Access |
| Version: | 6.x-1.0-beta3 |
| Component: | User interface |
| Category: | support request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed (fixed) |
Issue Summary
Not only is it showing my private forum posts on the front page to unregistered viewers, if I click the link and am not logged in, I can still view the forum! This means even if the Recent Forums Posts thing gets cleared up, the forums still aren't really private and people can guess the URL to get to the private forum topics still.
Comments
#1
Please follow the directions that were displayed when you posted your issue.
(And don't assign an issue to yourself unless you intend to write actual code for it.)
Where is Recent Forums Posts coming from?
#2
Please try installing the -dev version, which has fixed similar issues for others, and let us know whether this has helped or not.
#3
Actually, go right to BETA4.
Please reopen, if this issue is still present in BETA4.
#4
Automatically closed -- issue fixed for 2 weeks with no activity.
#5
Still active using the tracker module.
It shows recent forum posts - allows users access to posts in restricted containers/forums.
I tried using latest release of ACL and Forum access, and tried using dev.
#6
Changing to 'needs review'.
I'm also using image gallery access and I just noticed an anonymous user can view images in private galleries...
They can't view the gallery...
But if they are supplied with a link directly to that image, they get that image node.
#7
#493044: Permissions not set properly - Possible solution
#8
If rebuilding permissions fixes your nodes, then there is/was a problem with setting the permissions. This may be due to an older version of FA (and also IGA) and it should be fixed now, but nodes that were created while the older version was installed may not have the proper permission records. Updating FA and IGA doesn't automatically fix those nodes.
Since you rebuilt permissions, all evidence has gone, and there's nothing we can do anymore, unless this issue pops up again. If that happens, then please reopen this issue, open the Trouble-shooting node access fieldset on the forum administration page and follow the instructions there, with one node that doesn't behave as expected — BEFORE (and after) rebuilding permissions.
#9
@mcaden: Please follow up in the other thread.