|
For a forum category I set the access restriction to "manager", and choose to include child forums. Now the category, child forums and its messages should be invisible to those which don't have 'manager' access, right? Right! And true, in the forum index there they are invisible (for those lacking the access level). However, the 'recent posts' section shows the messages posted in the access restricted category, and when I' even logged out and click on them I get to see the message, though I will not be able to reply. Sadly, this means that - even when I disable the recent posts plugin, the retricted access messages are not securely hidden and so, not safe at all. Looks like a serious bug to me. I really need to secure a hidden section of the forum, so I guess I have to look for another forum module?
|
