Issue information
-
#035722
-
Cannot Reproduce
-
2.2.2
-
-
-
0 - None Assigned
Issue Confirmations
-
Yes (0)No (0)
0
Forum Feed Block - not honoring forum permissions
Posted by HSlammer on 05 February 2012 - 08:40 PM
using a feed block for latests topics, members can see topics in the topic list that are from a forum they are not allowed to view or visit in the forum permissions set.
1) If you cache blocks, the block is cached based on permissions for whomever viewed it and triggered it to cache. So if you are an admin and visit the page, and the block caches for 24 hours, what you see is shown to *everyone* for the next 24 hours.
2) Otherwise if you do not cache the block, you must make sure to check the option to honor forum permissions. They are not honored by default (in case you had a hidden news forum but wanted to show those articles on the homepage, for instance).
2) Otherwise if you do not cache the block, you must make sure to check the option to honor forum permissions. They are not honored by default (in case you had a hidden news forum but wanted to show those articles on the homepage, for instance).
1 user(s) are reading this issue
0 members, 1 guests, 0 anonymous users
