How to prevent unreg'd seeing members list in Quick Links?
 

I want unregistered users to be able to see a forum and view threads in it (Announcements) but no other forums.

I thought the best way to do this was to give unregistered users "read/view others" permissions in Usergroups; and then prevent them in all the other forums in Forum permissions.

It looks OK except when an unregistered user clicks on Quick Links tab you can access the registered users list with all their data.

How can I prevent this?

Thanks, Nick

Go to the Usergroup Manager and set Can View Member Info to No for the usergroup and then they will not be able to see the Members List.

Nope. I enabled "can see own and others'" in the Usergroup Manager, only. All the other "Can View" permissions are no. I have set all the other forums for unregistered to "no" everything.

Still the "Quick Links" shows Forum Leaders with all their data. But can see the particlar forum as desired.

There is nothing about Can See Own and Others under the Who's Online permissions in the Usergroup Manager (where you go to set who can see the Members List/information). And Members List and Forum Leaders are two different things - which are you talking about? What I posted will make it so the users may not view the Members List. If you don't want them to view the Forum Leaders page, I think you'll have to write a plugin to stop them.

Sorry, my fault. :o

I was talking about forum leaders which, on my system shows personal data so I can't allow that.

Thanks,

Nick

Have you tried to wrap that template code with a vb:if conditional? This may work but I am not sure. Lynne is that possible?

I got a hack here (ms_leaders_ugp_40) and it fixes the problem perfectly.

Thanks for your help.

Nick

I'm sure you can put if statements around stuff in the template to not show info to certain usergroups (or, perhaps better in this case, only show info to some usergroups).

Thanks Lynne I didn't know for sure but you confirmed it should be possible. Hope this helps the poster.

As a practical matter I don't like changing code because if I need to upgrade I am chasing around to bring my forum back.

I like a hack because it's either installed or not.

Is this wrong?

Nick

It's not wrong to prefer a modification, however it isn't always possible. And sometimes it is much simpler to just modify the template.

I can certainly understand that nick but as Lynne stated makes since. I merely suggested if it was possible as you were asking if it can be done and didn't state a modification so I thought it was a open field. You may want to ask for this as a request in that section here on the forum and see if someone would whip it up. But with what Lynne posted is the easiest and fastest. You could bookmark this thread so if you ever need it or make a word doc for future needs too.

Lynne,

I wonder if you can help?

You solution removes the link to the members list, but still does not stop people from accessing it..

All people need to know is the name of the page. i.e showgroups.php
If they know that, and append it to the url, they can access the list of members regardless of if they are registered/unregistered, allowed or not allowed to view it.

I found this out because a user did a search on Google and accessed the members list right off the bat. Now my users are moaning about privacy :(

Any ideas how to plug this hole?

Cheers

Chris

Then just create a plugin at the top of that page to not allow unregistered users to see it. Something like (you'll have to look at the page to find a hook_location):