ISSUE SUMMARY:
Created a closed and hidden group. Members of said group post a video, photo or create and event, and non-group members can view the content outside of the group. For example: photos. Non-group members can go to the photos page and see all photos posted under the closed group's photo album. Same for events. Closed group events are visible to all members of the site.

Hi John,

This is bug, thank you for reporting.

cheers

Awesome, thanks!

This issue caused by group manager role maybe.. our developer is inspecting this

Interesting - I've tried with just one group admin and multiple. All the same result. Thanks for the update!

Please you try open this file components/com_community/helpers/owner.php, find this code :

if($jUser->authorise('core.admin') || in_array('6', JAccess::getGroupsByUser($userid)) || in_array('7', JAccess::getGroupsByUser($userid)) ){

if($jUser->authorise('core.admin') || in_array('7', JAccess::getGroupsByUser($userid)) ){

That fix did help some, the items posted in a group are no longer showed in the activity stream. However, photos are still accessible by anyone.

Nothing will show up in the photos module, which is good. The problem remains when a user clicks on the View All Photos link, and the closed group's album is listed. All photos can still be seen.

Hi John,

regarding photo issue, can you create new topic please? and dont forget provide FTP and phpmyadmin access there.

thank you

Will do, thanks for the prompt reply!