i notice it makes the threads only appear to be private because the posts within the faux private threads are available via search for all posts by user. Apparently the mod should really be titled Not Quite Private Threads
i notice it makes the threads only appear to be private because the posts within the faux private threads are available via search for all posts by user. Apparently the mod should really be titled Not Quite Private Threads
Pls consider this: there is a difference between using the search function as admin and as normal user or even guest. Different rights mean different (search) results.
I believe that you did what I did before with this addon: I did him wrong because I forgot that admins won't be excluded from those threads for security purpose. I had the same complaints before I checked normal user rights instead of my admin account (dumb, I know ).
Log out and re-check via guest or normal user account and get back here. The only thing I receive is "This is a private thread" when doing a search then but no content insecurity after all.
Pls consider this: there is a difference between using the search function as admin and as normal user or even guest. Different rights mean different (search) results.
I believe that you did what I did before with this addon: I did him wrong because I forgot that admins won't be excluded from those threads for security purpose. I had the same complaints before I checked normal user rights instead of my admin account (dumb, I know ).
Log out and re-check via guest or normal user account and get back here. The only thing I receive is "This is a private thread" when doing a search then but no content insecurity after all.
I wouldn't have posted without first trying both as an admin and as a regular user, plus I had several of my regular users point out to me that while the thread is private when they attempt to access it, when they go to a user's profile page and select show all posts by user the posts from the supposedly private thread show up.
Go to the creator of a private thread that your regular user account should not be able to read. Go to Statistics, then do Show All Posts by <creator of the private thread>. In addition to all the non-private thread posts, the private thread posts are fully displayed.
In order to prevent this I currently have to disable the Forum Search for my users (as the Private Threads is more important to them), but I shouldn't have to.
would you please try the procedure I described in the earlier post to see if this is a basic deficiency of the mod or a difference between v3.7x and v3.8?
i notice it makes the threads only appear to be private because the posts within the faux private threads are available via search for all posts by user. Apparently the mod should really be titled Not Quite Private Threads
I kinda agree. To me, its not even "Not Quite Private Threads." Its more like "Deny Post Viewing For Certain Users or Groups."
@The author: Dont get me wrong, the hack itself is excellent...I simply feel that its misnamed.
For example, a private message cant be seen by anyone at all except for those whom its intended for. Thus i think that a private THREAD should be 100% invisible if you arent part of the usergroup(s)/ person(s) who are allowed to see it...
It should be like ts not even there. If I start a private thread as an admin, I should be able to see it...but if I log in as a regualr user, it should be as it it doesnt exist at ALL...
Again, just my two cents. Its partially there by disallowing the viewing of the conversation in question. If it were to be taken to that last step? It'd be killer...