I have a problem with staff forums and privacy issues

[mauisun]

I have to turn off members ability to enter the inner who's online and access the members list because of this. no matter what settings i try, if a member goes to who's online or the members list, if they click on a staff members name? it shows the staff members posting to a title from inside the staff forums. Basically, if I make a post in the admin or moderator forum, the title itself can be viewed by any regular member just by them clicking on my name in who's online or by going to the members listing, picking my name and clicking onit, in there is shows the title of the last post I posted to, even if the title is from a restricted forum. I would appreciate some help clearing this up. I don't get members being able to see the titles of posts in the vw latest posts thread but the other tow ways they can see the titles of threads I need to get rid of. To me that is a large breech in security, even if they can't view the thread itself they can see the titles of the threads.
I seriously need some help on this so if anyone can help me out, please do so, thanks alot
......mauisun

[Erwin]

That is a bug in vB2. It's been discussed in vb.com.

To fix this, you need to do this:

1) Switch on forum permission masks.

2) Manually set each private forum's permissions for each usergroup - do NOT rely on the parent forum's permissions - you need to set EACH ONE individually.

When you have done the 2 things above, thread titles in private forums will no longer show up.

[mauisun]

Erwn, thanks for taking the time to reply.
I do have masking turned on. my admin category has 3 forums in it, admin, mod and mod2.
in each forum I have registered members set to view-yes, and everything else is set to no. I have this as the user group setting for the parent forum, and even have it set as custom setting in every subforum just to make sure. Yes they can see the forums but can't enter them, but unfortunately I have the thread problem. can you tell me what settings I can change to make it right?
......mauisun

[mauisun]

I went back, went completely through every staff or private forum. I changed the permission settings on registered members both in the parent and the sub foums making every single thing yes on view, but no on everything else. when I turn view who's online back on, and allow registered members to view other members profiles? it still shows a staff post to a thread name from a private forum. there must be some other way to allow members to view who's online and other members profiles without seeing staff threads. I triple checked everything including having masks on but no go. any other ideas from anyone?
......mauisun

[Erwin]

Originally posted by mauisun
in each forum I have registered members set to view-yes, and everything else is set to no. I have this as the user group setting for the parent forum, and even have it set as custom setting in every subforum just to make sure. Yes they can see the forums but can't enter them...

No, you must set registered members view to "NO". That's the only way. It's a well-known bug in vB2.

Make sure that when you check you log out first. As admin, you will be able to see thread titles no matter what.

[mauisun]

problem with that is, if I set registered members view to "no" they won't even see the forum at all, which is not what I want. I have some forums that are closed forums until members are given permission, but the don't know to ask for permission if they can't see the forum in the first place right? I could be all wrong with my thinking here and if I am, this is definitely a cry for help I am still working on learning all the ins and outs of all the settings for the particular forums but this is one particular item that has me nto to sure about it all. thanks for any help I get
......mauisun