Post Feed Block Permissions Concern

[JohnDar]

I have a post feed block configured to display content from only selected Forums. This works well and keeps admin chat (in private areas) out of the feed block (even if members without permission wouldn't see it anyway). I've recently been looking at configuring the feed so that general content that isn't available to Guests shows up in the Post Feed, as an incentive for them to register.

However, if I disable the 'Honor permissions' toggle, within the Post Feed block editor, then everything recent, from every Forum is displayed within the feed to Guests, even from Forums that are not on the selection list and should be private.

That means that the posts from the Admin area (which aren't visible to none admins) show up in the post feed for guests.

Is this how it is meant to work, with the 'honor permissions' toggle overriding the Forum list, or is this possibly an issue?

[Jim M]

If forums are showing up that are not explicitly selected, please submit a ticket. 

[Daniel F]

There was a bug which was fixed last week. Please run the support tools and follow the patch instructions to apply the late files.

[JohnDar]

Thanks guys. I've applied the patch but the problem is still there.  I'll submit a ticket.

[JohnDar]

Having submitted a ticket, it seems that this is working as intended:

Quote

Hello,  This is proper, if you tell it not to honor permissions it won't. 

I still feel that this is debatable, given that it completely overrides the specific Forums selected in the whitelist and displays all new posts from everywhere. This is definitely counter intuitive. To have the ability to override the Forum whitelist OR everything (by selecting the 'all' checkbox) would greatly enhance the functionality.

[opentype]

18 minutes ago, JohnDar said:

I still feel that this is debatable …

I wouldn’t put it like that. It would be just plain wrong. The toggle says “permissions”, so logically, it could only apply to permissions, not some arbitrary other selections on the same settings page. 

[Lindy]

If you are saying that you have honor permissions disabled, have only selected certain forums and the widget is showing topics from other forums, not selected, then yes, that is a bug. 

As mentioned, an issue related to this was fixed last week. I'll take a look at your ticket and ensure it was applied when you updated.

[JohnDar]

@Lindy That is exactly what I'm saying.

I've applied the recent interim patches but the issue is still there. Note that I closed the ticket after being informed that the permissions are behaving as they should, so I can't currently respond to you there.