Hi guys,

Great job you are doing with the forum software!

One (quite serious) glitch is the new RSS feed button at the top of a forum.

I have one board in my forum restricted to a member group called "salon owners". Although all members can view the topic titles on the message index, I restrict reading messages and making replies to the "salon owners" group.

I have just viewed my restricted salon owners forum as a guest and when I pressed the RSS button I was able to read most of the posts.  

I have password protected that part of the forum for now but this security issue needs to be fixed.

So a quick recap of the problem in generic terms is: If you make a board index on your forum visible to all members, but only allow certain members to read messages, when a guest clicks the title of a topic on that board they will get a message telling them that they are not allowed to read messages on that board. That's OK.
Unfortunately though, if the guest presses the new RSS button there is no security and they will be presented with the contents of the posts they shouldn't have access to.

Hope I've explained myself OK.

Regards,
Chris.

    

Ah, I'll add that to my list.  Not too big though.  You can block message index and it'll block them.

What do you mean by that Justin? Do you mean hide the actual forum from view unless you are logged in as a member of the group?

Thanks.

Yes.

Fixed.