Bug #185
closedPrivate Group Info/Documents on Activity Stream
0%
Description
Just noticed that documents posted to private Groups through the Group Documents plugin are publicly viewable and downloadable even to non-logged-in users. Yikes.
Updated by Boone Gorges about 14 years ago
- Status changed from Assigned to Reporter Feedback
I tried tracking down the real root of the problem but I had a hard time finding it. I fear that it might have something to do with the way that the group document plugin interacts with BP 1.1.3.
Since we're upgrading soon, I have taken the stopgap measure of disabling activity stream posts altogether for documents posted to private and hidden groups. I'll have another look after the upgrade to see if the problem fixes itself.
Updated by Matt Gold about 14 years ago
Great. Thanks for taking care of this so quickly, Boone. Wish we had that "hold" category going . . . maybe we should just leave it on "feedback" in the meantime?
Updated by Boone Gorges almost 14 years ago
- Status changed from Reporter Feedback to Resolved
Haven't heard back so I'll assume it's working fine.