Development > Fixed or Bogus Bugs

Board News block does not respect permissions correctly

(1/1)

phantomm:
1. Create board visible only for admin.
2. Create or modify Board News block, so it includes this board.
3. Post anything in board created in step 1. Remember, that this will be visible only for administrators, because only this group is permitted to see board.
4. Logout from forum and see what is in Board News block - there is message from board where guest do not have access.

SP 2.3.5 and SMF 2.0.8.

oNLy1:
......does deny guest viewing of block work via custom permissions work?

phantomm:
It's not about showing block.  It's about showing messages inside it. 

andy:
 It does appear to be a bug.

Creating a new board and deselecting all groups from:


--- Quote ---Allowed Groups:
Groups allowed to access this board.
Note: if the member is in any group or post group checked, they will have access to this board.
--- End quote ---


This does hide the board from everyone except admin but it does show to guests the posts made in that board on a SP block of board news.

It doesn't show up in recent posts and topics block, or on the calendar block if added to the calendar. Same if added as an article.

Using SSI.php it is hidden in board news and recent posts so it looks like something is wrong with SP permissions for the board news.

You can see here on the home link that there is a 'test hidden board 1 post' link.

hxxp://ichikawa-eikaiwa.com/smf/index.php

[SiNaN]:
This was intentional for some reason I can't remember. It makes sense to force the board permissions, indeed.

Fixed for the upcoming version.

Navigation

[0] Message Index