Jomsocial v 4.3.0
Replicated issue on fresh install
Issue
I have created a private group, only visible to admins. Wall posts, new discussion, discussion comments do not appear on the main stream for registered users. This is expected.
However, when a discussion is 'Liked' or the Group is 'liked' by an admin, this appears in the main feed for all members to see.
This is concerning as the discussions for admin within the private group are not for the eyes of the members.
If this is a bug, is there a dirty fix I can use until it's patched officially? If not - how do I hide the 'Like' buttons on the group AND discussions?
We're moving from Invision Power Board to Jomsocial, the the main member base moving across on Sunday and I need to be 100% confident that Jomsocial permissions are correct and members are not able to see info they should not.
To replicate:
1) Login as a supersuser / admin
2) Create a group
3) Set group to "This is a closed group" and "Hide on list of groups"
4) Go to group and 'Like'
5)Create a discussion
6) Like the discussion
7) Log in as registered user
8) Go to main stream
8) See group likes and discussion likes
HI, Pete.
Thank you for contacting us and reporting this issue.
I'll pass your report to our developers.
Hi Michael, have we had anything back from dev yet? I hate to ask as completely understand you have triage and priority of all raised incidents - only our website goes live on Sunday with our core member base and I'll need to start looking at an alternative solution.
Many thanks for your support
Hi, Pete.
I've sent you patch file at batty****@me.com. Please, check if it works for you.
HI, Pete.
Yes, this patch will be included in next version. ;)