Skip to:

Opened 11 years ago

Last modified 10 years ago

#2453 new defect (bug)

Search results and user's list of replies show replies from protected topics to everyone

Reported by: tatiana_k's profile tatiana_k Owned by:
Milestone: 2.8 Priority: normal
Severity: normal Version: 2.4.1
Component: Component - Replies Keywords:


The issue is about the replies in the password protected topics.

When a person enters the password protected topic name (or a part of it, or just some words that hidden replies can include) in the Search field, the forum shows the list of replies without any restrictions. While the title says that the topic is protected, the content of the reply is not hidden at all, and anyone can read it.
The link is like that:

The same is with the list of user's replies in their profile. Everyone can read all the replies, even those in protected topics.
The link is like that:

I possess that replies from hidden topics should be either excluded from the search results and replies list at all, or their content should be hidden.

Change History (4)

#1 @johnjamesjacoby
11 years ago

  • Milestone changed from Awaiting Review to 2.7

You're probably right, and it's a case I hadn't considered. Password protected forums and topics are really only loosely supported currently, so we'll need to spend some time looking into what fully supporting it should look like.

Going to move this into 2.7, because 2.5 and 2.6 are filling up.

Any patches or discussion are welcome and encouraged.

Thanks for the report.

#2 @johnjamesjacoby
11 years ago

  • Owner tatiana_k deleted

#3 @netweb
10 years ago

Related: #2517

#4 @johnjamesjacoby
10 years ago

  • Milestone changed from 2.7 to 2.8

Bumping all 2.7 to 2.8 milestone.

Note: See TracTickets for help on using tickets.