Notice

The forum is in read only mode.

Support Forum

Welcome! Support Forums have been reactivated

User can see private (hidden) group's miniheader and ask to join it

7 years 6 months ago
Licenses:
JomSocial Active

Hello.
1) try to visit private (hidden) group's page as guest or registered user: crimson-land.ru/groups/viewgroup/64-zhest-dlya-vzroslykh
Result 1 (as expected): I can see only "Error. Sorry, you don't have permission to see this group". No group's header, avatar and "Join" button.



2) try to visit private (hidden) group's video page as guest or registered user (for example somebody shared link in public area): crimson-land.ru/videos/video/32217-golay...po-ulitse?groupid=64
Result 2: User can see miniheader and can requast Join group.


Expected result: He should see Error message like in "Result 1".
I didn't tested it with other group's items (discussion, albums, events).

Thanks.


Sorry for my English
Attachments:
7 years 6 months ago
  • Dimas's Avatar
  • Dimas
  • Visitor
  • Thank you received: 0
Licenses:

Hi,

This is valid bug, thank you for reporting.

cheers!

7 years 6 months ago
  • Dimas's Avatar
  • Dimas
  • Visitor
  • Thank you received: 0
Licenses:

To fix this
- open this file components/com_community/templates/jomsocial/layouts/groups/miniheader.php
- add this code after line 22

if ($group->approvals == COMMUNITY_PRIVATE_GROUP && !$group->isMember($my->id) && !CFactory::getUser()->authorise('community.groupedit', 'com_community') && !CFactory::getUser()->authorise('community.groupeditstate', 'com_community') && !CFactory::getUser()->authorise('community.groupdelete', 'com_community')) {
     return false;
 }

Moderators: Piotr Garasiński
Powered by Kunena Forum

Join 180,000 websites creating Amazing communities

JomSocial is the most complete, easy-to-use addon that turns Joomla CMS into a
full -fledged, social networking site

TRY NOW BUY NOW