"unapproved topic" still shows to regular users

[stcorp]

We're running 5.1.5.

We recently flagged some words as spam in AdminCP/Settings/Spam Settings in the Auto Moderation Settings section.

Sure enough, posts with any of those words are created as unapproved.

The problem is that all users on our site, not just administrators, can still see the unapproved posts.

I searched in JIRA and found this: http://tracker.vbulletin.com/browse/VBV-1048 which is similar but seems to be talking about replies rather than original topics.

I'm happy to provide a login and test case to support if someone will contact me/PM me.

If there is some setting we have missed to prevent regular users from seeing unapproved posts, let me know where to look in the settings.

Thanks!

[Wayne Luke]

It is a usergroup permission. "Can See Deletion Notices". Is that set to yes for the usergroup in question? You will need to check in the usergroup manager and under channel permissions. Plus if the group has any permissions under "Moderator Permissions" set to yes, they will probably be able to see them.

[stcorp]

The usergroup is "Registered Users". Looking at permissions under Usergroup Manager shows

Moderator Permissions all set to "No".

Under "Forum Viewing Permissions", "Can See Deletion Notices" is set to "No".


By the way, it isn't just registered users who can see unapproved topics -- if I open a new incognito tab, so I'm not logged in at all, I can still see unapproved topics. For usergroup "Unregistered / Not Logged In", all Moderator Permissions are "No" and "Can See Deletion Notices" is set to "No".


Under Channel Management/Channel Manager, looking at both group "Registered Users" and group "Unregistered / Not Logged In", "Can See Deletion Notices" is set to "No", and all moderator permissions are set to "No".


I believe this is a bug in all versions of 5.*.*, and not particular to our forum.

I am happy to provide a link to the forum and an admin login via PM if you would like to take a look.

[Wayne Luke]

You would need to open a support ticket if you want someone to look at it.

[Wayne Luke]

Can you see unapproved topics here: http://www.vbulletin.com/forum/forum...est-things-out

There should be five of them on the first page. I cannot see them as a guest user.

Did you review the moderator permissions under Usergroups -> View Channel Permissions? The Forum Permission viewer isn't really helpful for viewing multiple permissions at a time.

[stcorp]

Done -- thanks.

[stcorp]

Can you see unapproved topics here: http://www.vbulletin.com/forum/forum...est-things-out

There should be five of them on the first page. I cannot see them as a guest user.

Did you review the moderator permissions under Usergroups -> View Channel Permissions? The Forum Permission viewer isn't really helpful for viewing multiple permissions at a time.

No, I cannot see unapproved topics there.

One thing to note is that these unapproved topics are being automatically set as unapproved by the spam-flagging system within VB5, in case that makes any difference. In any case, I just opened a support ticket complete with admin login information for our forum.

[stcorp]

Just to close the loop on this, we did submit a support ticket, and it was verified to be a bug. The bug is now in the tracker here: http://tracker.vbulletin.com/browse/VBV-14299

Not that anyone recommends editing the PHP source files for vBulletin, but based on the information in the above bug report, the file core/vb/library/content/text.php can be modified to add "$data['showapproved'] = 0; in two places immediately after "$data['approved'] = 0;" and immediately before "$isSpam = true;". On our site, this fixed the problem, and spam is now properly being marked as unapproved AND not visible to regular users.