Problem with Password Protected forum

[ToraTora!]

Just thought i would throw in something that may cause some problems down the road.

The password protected forums of course will not show to a user logged in, and a password must be presented in order to continue access, however, as a logged out user, the forums are visible (including the sub forums) for that password protected forum.

The other problem is, after a person has entered in the password, i see nothing for posts or threaded replies. When i log out however, and clear the history, cookies, and files from my browser, i again can see the password protected forums and their subforums and subsequent posts/threads when i click on the link that is supposed to prompt the password area without logging in.

I am currently using IE6, and from past experiences with some issues that i personally ran into with IE6 and cookies for some of my own similar scripts, this is something you might want to double check on to avoid persons to view something that they shouldnt be..especially when they are not even logged in. :)

[ToraTora!]

Logged in. Notice that only the L1 forum (category) is visible.

[ToraTora!]

This is the logged out view. Note the visibility of the password protected forums, which in my opinion, if they are passlocked, shouldnt even be seen period to the casual user. Lets say, something like mod forums, admin forums...etc..

[ToraTora!]

Ok, im still logged out, but entered in the password to see these passworded forums.

[ToraTora!]

The point im trying to make, is that when i log in, and enter the password, i see nothing at all..just like if you have the setting for guests to not see any of your posts, or threads. (just the usual message of "There has been no blah blah blah here for quite sometime")

My thinking is, if its password protected, it should also be visible to the usergroup that it is represented for. A setting, or forum mask should be used if it hasnt already.

As a logged out user, or guest for that matter, i should not be able to see these forums, because for one, having it passworded as such, will give some guest or non member the chance to keep cracking away at the password area until maybe one day they solve it and gain entrance without the administrators knowledge...again, they should not even know that forum exists...thats kind of my point i guess...as a guest, or nonmember, zero zilch should be revealed for password protected forums to non members or guests, and only visible to the usergroup that they represent (ie moderators, admins, etc..)

[Mike Sullivan]

It's just like this because the registered group has additional permissions setup on the L2 forum that won't let you see it I believe.

Passworded forums will not be automatically invisible to unregistered users, but you can always setup permissions for them to do so.

[ToraTora!]

Ok, but the concern that I would have with something that is passworded, is newer users who are not familiar with usergroup masks etc, forum permissions..etc...

I know in the past, when i first set up my forums, i had a couple "you cant see this but us" type forums, many did see it because of my inexperience with the forum permissions and mask utility, which left some explaining to do when the thread title was viewable to all.

Maybe its not a huge issue, but having something passworded, but yet viewable as default (not sure what settings are used on there Ed) to unregistered, or logged out users poses a possible problem for those who may forget to set those access masks. IM not sure how the new usergroup settings work, but it sounds like many of us are going to have a relearning experience with the permissions, and I myself would make a mistake similar to the one described.

I guess in a nutshell, if it is chosen password protected, in my opinion, it should be viewable only to the administration (possibly moderators) as default until the proper settings are issued, however since i do not know what settings are already implemented in those screenshots, this could be something that is already standardized practice.