SimplePortal

Development => Bugs => Fixed or Bogus Bugs => Topic started by: phantomm on August 23, 2014, 04:45:09 PM

Title: Board News block does not respect permissions correctly
Post by: phantomm on August 23, 2014, 04:45:09 PM
1. Create board visible only for admin.
2. Create or modify Board News block, so it includes this board.
3. Post anything in board created in step 1. Remember, that this will be visible only for administrators, because only this group is permitted to see board.
4. Logout from forum and see what is in Board News block - there is message from board where guest do not have access.

SP 2.3.5 and SMF 2.0.8.
Title: Re: Board News block does not respect permissions correctly
Post by: oNLy1 on August 24, 2014, 09:24:06 PM
......does deny guest viewing of block work via custom permissions work?
Title: Re: Board News block does not respect permissions correctly
Post by: phantomm on August 25, 2014, 01:31:20 AM
It's not about showing block.  It's about showing messages inside it. 
Title: Re: Board News block does not respect permissions correctly
Post by: andy on August 25, 2014, 04:38:48 AM
 It does appear to be a bug.

Creating a new board and deselecting all groups from:

Quote
Allowed Groups:
Groups allowed to access this board.
Note: if the member is in any group or post group checked, they will have access to this board.



This does hide the board from everyone except admin but it does show to guests the posts made in that board on a SP block of board news.

It doesn't show up in recent posts and topics block, or on the calendar block if added to the calendar. Same if added as an article.

Using SSI.php it is hidden in board news and recent posts so it looks like something is wrong with SP permissions for the board news.

You can see here on the home link that there is a 'test hidden board 1 post' link.

hxxp://ichikawa-eikaiwa.com/smf/index.php
Title: Re: Board News block does not respect permissions correctly
Post by: [SiNaN] on September 15, 2014, 04:38:19 PM
This was intentional for some reason I can't remember. It makes sense to force the board permissions, indeed.

Fixed for the upcoming version.
SimplePortal 2.3.8 © 2008-2024, SimplePortal