[apokphp]

Found a bug, pretty major IMO. It's a permissions but.

The display of thread titles in the stats box is mistakenly pulled from the permission setting of "Can View Forum". It erroneously applies that permission to determine if X usergroup can see a thread title of that forum in the stats area. It should be pulling from "Can View Others' Threads". It's this setting that disallows non-usergroups of that forum to not be able to see any thread title on the forum home page (and is why these usergroups will see nothing there).

To be clear, private forums appear on the forum home screen for all to see, but the contents or latest thread title is not available to those w/o access.

The stats mod however, allows visible access to those who are not supposed to see it (because they are not a member of that private forum).

See the attached images. This is what just registered users see (who do not belong to any private forum or usergroup with access to private forums). Registered users should not be seeing these thread titles in the stats mod.

The red arrows in the 2nd screenshot show the thread titles of private discussions that groups w/o access to the forums, can see. This bug is significant enough for us to uninstall if it can't be fixed as it means that non-staff have access to the thread titles in our staff forums (in addition to the complications it creates for private forums).