['feature'] forum leaders problem

[butty]

when people go to forum leaders it tells you what forums they moderate, but even for not logged in users they can see the private forum titles on my site that they shouldnt be able to see??

thanks in advance

[Fusion]

Sorry? Have you adjusted the group-permissions for Guests and new users so that their access is restricted? As far as I can tell, truly private forums (ie. forums you manually add to people's permissions) do not show up in the forum leaders for users who don't have permission to view those forums.

[butty]

erm nope i dont think ive changed my guest permissions or n e thin, if u look at the forum leaders of this forum even when your not logged in you can see a mod of vbulletin 2 beta testers, now surely i shouldnt be able to see that

[butty]

sorry mate just got me head round the last post, yeah i have different user groups whereby they have axx to different areas but i thought that was the whole idea of having groups?? coz if i had 2 go to each person manually n change there axx masks to reflect the sections they could see id be there all night! lol :)

[Fusion]

Let me rephrase then;
Assume your forums are...Let's say adult-orientated, then you make a new group called Kiddie, that's only supposed to be able to see one or two forums. If you access the Forum and Group-permissions for the group Kiddie thru the Admin CP, you would be able to set a general rule that say users of this group shouldn't be able to see any forums, yet give special privileges for the two forums they should be able to see. It really can't be any easier than this.

[Fusion]

D'oh.. Now I see what you mean. ;) Well, no biggie, they can't access the forums anyways (I just tried the vB 2.0 beta testers), but I agree it's a tad inconsistent. Also, I think this is a bug that was (re-)introduced in 2.2.1, I'm still on 2.2.0 and don't see that.
Tubie, you wanna do the honors?

[butty]

lol dont ya just love bulletin boards buddy when ya both talkin bout summet completely different!! :)

i know it aint a big problemo coz the peeps cant get in but my private sections ive had to rename coz if not i know that im gonna get peeps sayin so then butty why cabt i get in the secret treausre maps bit

erm althou i dont have a secret teasure maps section, althou it would be nice :)

[tubedogg]

Interesting because there was nothing changed in regard to permissions between 2.2.0 and 2.2.1.

Also it would have been impossible for this bug to exist pre-2.2 because showgroups debuted in 2.2. :p

[tubedogg]

OK I checked this out and...I can't reproduce it.

[Fusion]

Tubedogg, when I check the Forum Leaders on this forum, I see the beta 2.0 forum, yet I'm unable to view the forum itself. That's not the case on my local 2.2.0, a forum a user doesn't have permission to view, doesn't show up on the 'Leaders page.

[Fusion]

Directly related to this, while viewing Who's Online on this forum, I was able to see that some people were schlepping in the Developer's Lounge. Are we wrong in thinking that if you do not have permission to view a forum, you shouldn't be able to see who does? Or is this Jelsoft's idea of cruel&unusual punishment, outlawed in most western societies?

[tubedogg]

I have a feeling this has to do with permissions on this board. There are more than just the Members group because of the licensed member stuff.

[Fusion]

Cruel&unusual punishment it is then. :p

[tubedogg]

This is actually a bug...moving as such. If you have private categories, moderators of the forums in that category are still displayed.

[tubedogg]

Category permissions are intended to cascade down. The bug in this case is that neither online.php nor showgroups.php take that into account.

This will be fixed for v3. The temporary fix is to assign permissions to each individual forum and not rely on the cascading effect.