This is the place to report bugs and get support. When posting in this forum, please always provide as much detail as possible.
Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum, do not report it as a bug.
When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:
Hello.
I have setup two forum instances. One public and one totally private for the admins. Different menus also hidden.
Today i was informed that everybody can see the TOPICS and other information of the private forums if they click to a poster's posts (below the avatar)
/UserThreads.aspx?userid=whatever
Did i make something wrong or this is a bad bad security bug ?
Thanks
The same problem exists (for logged users only, still ..) in the Profile of somebody. They can click on the users threads and see everything
/Forums/UserThreads.aspx?userid=whatever
bypassing the security settings.
It is a known limitation of the forums. You have 2 options to deal with it.
Best,
Joe
Option #2 works ok,
Thanks !