Public bug reported:
Group settings are set to:
• Open: NO
• Controlled: YES
• Request: NO
• Publicly viewable group: NO
• Hide group: YES
• Hide membership: YES
• Hide members from members: NO
If a user figures out the unique URL that points to a group, they are
able to see the group homepage. It displays the general group info
(including who the admin is) and if the submission option is turned on,
they can also see the “submit a page or collection to this group” option
(see screenshot). If they try to submit to the group, it says access
denied.
Ideally, if a group is (1) closed, (2) users cannot request membership
and (3) “hidden”, when a user who is not a member tries to view the
group, the page should say “Access Denied”.
** Affects: mahara
Importance: Undecided
Status: New
** Attachment added: "Screenshot of demo group.png"
https://bugs.launchpad.net/bugs/1708471/+attachment/4926545/+files/Screenshot%20of%20demo%20group.png
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1708471
Title:
Users who are not members of a group are still able to see the group
and see the option to submit to the group.
Status in Mahara:
New
Bug description:
Group settings are set to:
• Open: NO
• Controlled: YES
• Request: NO
• Publicly viewable group: NO
• Hide group: YES
• Hide membership: YES
• Hide members from members: NO
If a user figures out the unique URL that points to a group, they are
able to see the group homepage. It displays the general group info
(including who the admin is) and if the submission option is turned
on, they can also see the “submit a page or collection to this group”
option (see screenshot). If they try to submit to the group, it says
access denied.
Ideally, if a group is (1) closed, (2) users cannot request membership
and (3) “hidden”, when a user who is not a member tries to view the
group, the page should say “Access Denied”.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1708471/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to : [email protected]
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
