Fixed (Security) Anyone can post in open groups' forums

[Shiro]

@Nobita

Anyone, including non-group members can post in open groups, even when guest posting is off. When guest posting is off, non-group-members should NOT be able to post in group forums. The original bug report came from a member of my site and is attached here.

 

[Shiro]

@Nobita


Guest posting is off.

 

[Truonglv]

@Nobita

View attachment 1767
Guest posting is off.

ShiroDoes grant permission enable by default?

 

[Shiro]

By default, registered users of the site can post in forums.

 

[Truonglv]

Grant permission from group. 'Bypass all groups rules'?

 

[Shiro]

That permission is not given to anyone but staff

 

[Truonglv]

Fixed. Many thanks