Private Group Info/Documents on Activity Stream
Just noticed that documents posted to private Groups through the Group Documents plugin are publicly viewable and downloadable even to non-logged-in users. Yikes.
Updated by Boone Gorges over 12 years ago
- Status changed from Assigned to Reporter Feedback
I tried tracking down the real root of the problem but I had a hard time finding it. I fear that it might have something to do with the way that the group document plugin interacts with BP 1.1.3.
Since we're upgrading soon, I have taken the stopgap measure of disabling activity stream posts altogether for documents posted to private and hidden groups. I'll have another look after the upgrade to see if the problem fixes itself.