Fixed 2.9.0.b - unregistered users may browse private group threads

J

janslu

Active Member
This is something I already had a problem with in one of the previous versions. This may be a misconfiguration on my part, but after upgrading from 2.8.6 to 2.9.0.b I got complaints that users who shouldn't have access may browse private groups forums and threads. They have to know the thread link and enter it manually, but it shouldn't work at all.

example link is here: https://www.babyboom.pl/forum/temat/powrot-do-formy-czyli-watek-dietowo-sportowy.87808/

Any idea if I need to change something on my side or is it a bug?
 
@truonglv Is this is a bug? Will you be able to fix it? My users are revolting and I need to at least tell them when private groups will be private again. This is super important.
 
I will try to fix in this week. I guess that i are going to XF2 version.
 
Please fix it in 1.x also. I need at least few weeks to be ready for 2.x migration, and users are furious. Especially with gdpr fever here inEurope security of their info is hyper important. Thanks
 
You must log in or register to reply here.
Back
Top