|
|
Joined: Jun 2006
Posts: 956
Old Hand
|
|
Old Hand
Joined: Jun 2006
Posts: 956 |
If I stack boards more then one level deep I be able to see as guest without user or admin rights hidden boards.
Example: category, sub (test) with more sub (test1, test2)
I can see the existence of test1 and test2 in the postlist but I'm not able to enter. This can cause a lot of trouble....
Last edited by Rick; 12/12/2006 3:05 PM.
|
|
|
|
|
Joined: Jun 2006
Posts: 956
Old Hand
|
|
Old Hand
Joined: Jun 2006
Posts: 956 |
any news on this? This become a big problem on my boards. User can see threads about some topics and go upset....
|
|
|
|
|
Joined: Jun 2006
Posts: 9,242 Likes: 1
Former Developer
|
|
Former Developer
Joined: Jun 2006
Posts: 9,242 Likes: 1 |
No luck yet Zarzal, still trying to duplicate and fix.
|
|
|
|
|
Joined: Jun 2006
Posts: 956
Old Hand
|
|
Old Hand
Joined: Jun 2006
Posts: 956 |
duplicate is easy. Setup like follows: Category, in it a forum (a). Then create a sub forum (b) with parrent of (a). Next you create a forum (c) with parrent of (b) and limited access to Admins, Mods or any special group. A user should not able to enter and see postings in forum (c). This look this: ![[Linked Image from home.snafu.de]](http://home.snafu.de/van.dusen/bug.jpg) In this example 77, 83 and 86 are my restricted boards and postings in theses boards show as postlist topic on 74. The forum (a) don't contain any post. There are only sub boards in it. In the post of this level you see sub forum (b) and the last posting entry of the forum (b) contains topics from forum (c) even the user have no access to forum (c). So he can see whats going on behind his back. Made this now clear? I can also grant access to my board to show you the problem. Let me now if you need more information.
|
|
|
|
|
Joined: Jun 2006
Posts: 16,299 Likes: 116
|
|
Joined: Jun 2006
Posts: 16,299 Likes: 116 |
(unrelated) Oddbar! muahahah! :cries: no one ever sees it but me
|
|
|
|
|
Joined: Jun 2006
Posts: 956
Old Hand
|
|
Old Hand
Joined: Jun 2006
Posts: 956 |
Gizmo, do you try it? Can anyone verify this problem?
|
|
|
|
|
Joined: Jun 2006
Posts: 9,242 Likes: 1
Former Developer
|
|
Former Developer
Joined: Jun 2006
Posts: 9,242 Likes: 1 |
I am able to duplicate it now. Can't get into the post but can see the title. Looks like some missing checks for check_access when listing the topics that I'm still trying to track down.
|
|
|
|
|
Joined: Jun 2006
Posts: 956
Old Hand
|
|
Old Hand
Joined: Jun 2006
Posts: 956 |
Great to hear. That sounds good. Duplicate the problem is the first step and I m sure you will find the problem.
|
|
|
|
|
Joined: Jun 2006
Posts: 16,299 Likes: 116
|
|
Joined: Jun 2006
Posts: 16,299 Likes: 116 |
Gizmo, do you try it? Can anyone verify this problem? 'eh was just posting that a bug that has been following me (just me it seems) around since alpha appeared lol...
|
|
|
|
|
Joined: Jun 2006
Posts: 9,242 Likes: 1
Former Developer
|
|
Former Developer
Joined: Jun 2006
Posts: 9,242 Likes: 1 |
Ok, I did find the fix for this, but it's a pretty big changed to the postlist code so it's not something I can post. This will be fixed for 7.1 however.
|
|
|
Bots
by Outdoorking - 04/13/2024 5:08 PM
|
|
|
|
|
|
|
|
|
|
|
1 members (Nightcrawler),
963
guests, and
210
robots. |
|
Key:
Admin,
Global Mod,
Mod
|
|
|
|
