Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Disallowing people without permissions from viewing profile "comments?"
I recently set up a Vanilla forum and imported some content from a PHPBB 3 forum. After resetting all of the appropriate permissions for categories, I was alarmed to find that guests (who are allowed to view some categories) are able to see snippets from posts that are in categories that they are not allowed to view when they view a user's profile and then click on the Comments tab. Is there a way to change settings so that users without appropriate permissions never see anything from any of the categories they are not allowed to view?
Tagged:
0
Comments