I could replicate this as well. I think there are a few things here that we'll keep separate.
1. When you are not a member of the group and submissions are allowed, you shouldn't have the possibility to submit a group only to end up on "Access denied". Only people who are allowed to submit portfolios to a group should see that option. This is the bug here. 2. When a group is hidden from non-group members, non-group members should not be able to access the group homepage and any other parts of a group even if they reach them via the direct URL and only receive "Access denied". This is a wishlist item. Currently, the "hide" functionality only hides the group on "Find groups". The wishlist item is at bug #1724409. ** Summary changed: - Users who are not members of a group are still able to see the group and see the option to submit to the group. + Non-group members can still see portfolio submission option in group -- You received this bug notification because you are a member of Mahara Contributors, which is subscribed to Mahara. Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it! https://bugs.launchpad.net/bugs/1708471 Title: Non-group members can still see portfolio submission option in group Status in Mahara: Confirmed Bug description: Group settings are set to: • Open: NO • Controlled: YES • Request: NO • Publicly viewable group: NO • Hide group: YES • Hide membership: YES • Hide members from members: NO If a user figures out the unique URL that points to a group, they are able to see the group homepage. It displays the general group info (including who the admin is) and if the submission option is turned on, they can also see the “submit a page or collection to this group” option (see screenshot). If they try to submit to the group, it says access denied. Ideally, if a group is (1) closed, (2) users cannot request membership and (3) “hidden”, when a user who is not a member tries to view the group, the page should say “Access Denied”. To manage notifications about this bug go to: https://bugs.launchpad.net/mahara/+bug/1708471/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~mahara-contributors Post to : [email protected] Unsubscribe : https://launchpad.net/~mahara-contributors More help : https://help.launchpad.net/ListHelp
