known issue Moderator CP > IP Tools > IP Address > Posts

[NAWAC]

I'm a moderator on our site. In the Moderator CP > IP Tools > IP Address > Posts, I notice that when I go to that tool/utility, I can see the title of the posts that members post, even if I don't have access to that sub-forum, which to me, this should not be possible. If you don't have access to a sub-form, you should also not be able to see the topic titles within the Moderator CP > IP Tools > IP Address > Posts utility. The same applies to the Moderator CP > IP Tools > IP Address > Polls, etc. There should be no title at all, similar to what is in the Moderator CP > IP Tools > IP Address > Private Messages list, on that Private Messages list, you cannot see the title of the Private Messages in that list. In my opinion, the same should apply to the IP Address tools; if you don't have access to those posts, topics, polls, etc, you should not be able to see the title of those topics, posts, polls, etc, for privacy/security. Because some titles of posts/topics give away the subject matter, which can be a breach of privacy in some instances.

Edited December 11 by NAWAC

[Jim M]

Thank you for bringing this issue to our attention! I can confirm this should be further reviewed and I have logged an internal bug report for our development team to investigate and address as necessary, in a future maintenance release.

 

[NAWAC]

17 hours ago, Jim M said:

Thank you for bringing this issue to our attention!

Youre welcome.