Fixed (Security) Anyone can post in open groups' forums PT 2

Shiro

Member
@Nobita

This bug is still not fixed.

It is possible for users to "Create Thread" in a group which is open, but does not allow guest posting. You patched this so reply isn't allowed, but Create Thread is still allowed.
 
Nevermind, the button is displayed and the form can be accessed, but the thread isn't allowed to post.

Perhaps remove the "create thread" button when no permission?
 
Back
Top