[Resolved] [Plugin: Private groups] Forums still directly accessible via URL
Thanks for making this plug-in! After some issues installing it (updated BBPress after installing Private Groups, which apparently necessitated a re-install of Private Groups) everything is working as it should.
However: there’s one issue with accessibility of forums which should not be accessible. Situation:
1. I have 4 forums: Course Information 2013, Course Reading 2013, Course Information 2014 and Course Reading 2014. All forums are set to ‘Private’.
2. The two 2013-forums are in forum group ‘2013’, the 2014-forums in forum group ‘2014’.
3. I have created a user (Pete) who only has access to ‘2014’, i.e. when I log in as this user I can only see the two 2014-forums.
That’s all good, but due to the nature of the names of my forums, students from 2014 can easily guess the URL of last year’s forums. By changing the URL from /forum/course-reading-2014 to /forum/course-reading-2013, Pete actually has full access to last year’s forums where he can see all the answers his predecessors have given to the questions he’ll be asked!
Clearly this is no good – the plugin seems to simply hide the forums from view, but not block access to them via direct URL. Is there a way to make it so that when an unauthorized user attempts to visit a forum he has no access to, he gets the same message a non-logged-in user would get, i.e. ‘page not found’?
- The topic ‘[Resolved] [Plugin: Private groups] Forums still directly accessible via URL’ is closed to new replies.