Quote:
Originally Posted by Rene Kriest
Pls consider this: there is a difference between using the search function as admin and as normal user or even guest. Different rights mean different (search) results.
I believe that you did what I did before with this addon: I did him wrong because I forgot that admins won't be excluded from those threads for security purpose. I had the same complaints before I checked normal user rights instead of my admin account (dumb, I know  ).
Log out and re-check via guest or normal user account and get back here. The only thing I receive is " This is a private thread" when doing a search then but no content insecurity after all.
|
I wouldn't have posted without first trying both as an admin and as a regular user, plus I had several of my regular users point out to me that while the thread is private when they attempt to access it, when they go to a user's profile page and select show all posts by user the posts from the supposedly private thread show up.
Go to the creator of a private thread that your regular user account should not be able to read. Go to Statistics, then do Show All Posts by <creator of the private thread>. In addition to all the non-private thread posts, the private thread posts are fully displayed.
In order to prevent this I currently have to disable the Forum Search for my users (as the Private Threads is more important to them), but I shouldn't have to.