IMPORTANT! Serious bug in 1.1 RC2-3

[Owdy]

Does it do that with default theme?

[bkLife]

Well maybe you have something cached in your browser. I get sent to the registration page when I click on what is found.

And I have no such issues with any of my 3 forums. All 1.1 RC3

That is not what he's pointing out. Snippets of posts from a private board are being shown. As you yourself say, it's there to click on and it shouldn't be.

No content, even a few words, should be shown to those who haven't the access rights/permissions to see those.

I could not agree more.

[Owdy]

Do you have any mods installed? What theme are you using?

Does it do that with default theme?

[bkLife]

Does it do that with default theme?

Yes, the theme used does not alter the results..

And no, i have no mods installed..

[Owdy]

What are your search engine settings, do you use fulltext index etc?

This works fine in my site.

[bkLife]

Nope, i am not using any form for indexing at the moment..

[Skipdawg]

So your complaint is that search finds hidden board post and shows a tid bit of it not that it is accessible to non-permission users?

If that is so I see your point there and yes that should be fixed. Limited to maybe the post is there but giving no information. Maybe a note stating permission only access. But any such post can not be fully viewed except for those with permission. Members will get a error message and guest will get the registration screen when it is clicked on.

[bkLife]

Exactly!

[Harzem]

If this is replicated by also Skipdawg, (I've not tested), then it is certainly a bug. We'll let developers know about this.

[Skipdawg]

Someone might be able to make a mod for that in the 1.1 line. But hopefully the right eyes will see this so it is Incorporated as a feature in SMF 1.2 and beyond.

I had never really thought about that before but that could in some cases become a major issue!
Thanks for bringing it up, good catch.  

[Harzem]

This has been reported in internal bug tracker. I've also posted a link to this topic there.

[bkLife]

It in fact did become a major issue for me, that is how i noticed it!

I lost my position as a moderator and download-section-worker from a competing site (yes, i was hired by two competing websites). All because the daily manager of this other site saw what i had written in the admin-board on my own site (which is the competitor to the other site, where i worked before all this happened)

In addition the competing site has made such a big deal out the few sentences they could se because of this bug, that my reputation in the entire community has been severely damaged. In addition i lost my best companion in the whole ******load of happenings! I believe he was the last hope for my site.. Now the future really doesn't look very bright at all!


So thats how ******ed up stuff can become out of such a small bug as the one i have now reported!

[Skipdawg]

This has been reported in internal bug tracker. I've also posted a link to this topic there.

Awesome!  And yes I was able to reproduce this this major bug/flaw! 

[Sverre]

I see the error on bkLife's forum, but I'm unable to reproduce it on my own RC3 install...

[Vanish]

I am unable to reproduce this on any of my SMF 1.1 RC3 forums. (4 of them) I see the issue on bkLife's forums, but without seeing how the permissions are set it's impossible to say why it is happening. I don't believe it's bug in the software since I can't reproduce on 4 different sites on 3 different servers and 3 different networks.

[SleePy]

I wonder..

Do you have local permissions set?

I had local permissions set and a child board under it that only admins could see. users could see topic links on latest post thing on board index..
I never tried doing a search but i bet it might of came up...

[Owdy]

This has been reported in internal bug tracker. I've also posted a link to this topic there.

You did, where? Then its a double ticket

[SleePy]

This has been reported in internal bug tracker. I've also posted a link to this topic there.

You did, where? Then its a double ticket

lol..
And They worry about us making double tickets.. and they make one themselfs.. 

[kegobeer]

I wonder..

Do you have local permissions set?

I had local permissions set and a child board under it that only admins could see. users could see topic links on latest post thing on board index..
I never tried doing a search but i bet it might of came up...

I can't duplicate this on my RC3 test install.  Is this a fresh install or did you upgrade to RC3?  Do you have global or local permissions for your boards?

I asked the same question, but never got a response.

[Harzem]

This has been reported in internal bug tracker. I've also posted a link to this topic there.

You did, where? Then its a double ticket

No, I've not double ticket-ed. I've already seen the old one and added a note linking to this topic


bkLife, would you let me (or other team member) login your forum as an admin and check the exact permission configuration, so that we can reproduce the bug?