[Forum] 4.2 new users can go straight into invite only member groups

[Bigmuz7]

As it says, it appears that a new member that registers is able to enter a group that is invite only, which, is still correctly not available to other current already registered members ?

whats going on there ?

Would that only happen if a member re registers from the same location and host, ie the forum remembers that, and allows access .. ive tried this and so has someone else, the ip addys were different though

[Zachery]

How would a user get into this group otherwise?

[Bigmuz7]

How would a user get into this group otherwise?

They would need an invite from the private group creator normally

[Zachery]

Are you sure its set to be a private group and that no one did approve them to get in? Is a leader set for this group?

[Bigmuz7]

No approval was needed for the new registrant to gain entry .. the group says it is by invite only, and Ive used an alias that proves that to be correct, as a currently registered member, my alias could still not gain entry, so why a new registrant could is a mystery.

Ive been able to replicate this from my my cell phone, using its different network, creating an account and accessing this private group straight away, without anyones knowledge

This group has had no problems so far, untill I did the upgrade to 4.2 and Ive changed nothing before or after.

I assume the leader is the creator, and only he/she can accept invites

[Bigmuz7]

Ive checked this from elsewhere, despite being able to set a group private, a new forum member can go straight into what should be a private , and by invite only group, this previously wasnt the case before this update and as I said I havent changed anything

[Maurd]

We're talking about Social Groups, correct?

Just to be on the same page:

• The group type is "Invite Only"
• The group options is set to "Users must join to view the content"

What makes you think they can view the group? Are they posting in it?

If they cannot access the group, they will get "You need to be a member of this group to view its contents" when they access it, however in the Who's Online it would show them as "viewing" that group.

Or are we talking about User Groups?

[Bigmuz7]

We're talking about Social Groups, correct?

Just to be on the same page:

• The group type is "Invite Only"
• The group options is set to "Users must join to view the content"

What makes you think they can view the group? Are they posting in it?

If they cannot access the group, they will get "You need to be a member of this group to view its contents" when they access it, however in the Who's Online it would show them as "viewing" that group.

Or are we talking about User Groups?

Yes sorry its a social group and its set to invite only, existing forum members cannot access it therefor, which is as it should be, but for some reason a new registrant can get an account and they are not barred from posting in such a group, and do not need permission to enter it, despite it being invite only.

Heres a url to a test group I created http://www.plantandconstruction.co.u...=14&do=discuss

[Maurd]

That's odd.

You can confirm that the Registered Users group (since that's where new users should go to) has these settings?

Admin CP >> Usergroups >> Usergroup manager >> Registered Users >> Groups Permissions

Can Always Post Messages > "No"
Can Always Create Discussions > "No"

[Bigmuz7]

Thats it ! ... thanks Maurd .. now I gotta find out how it changed ?