Hi Support, I allow guests to search my forum, BUT because it jams the full text answer in to the search results, they effectively can "read" the post / topic even though I've disallowed by Permissions, this behavior.
I agree with the previous thread poster....
This seems to be a disconnect between security privileges and search results. In other words "security doesnt appear to mean anything when it comes to search results"
I respectfully request to only show "titles of topics and replies" in accordance with the security policies I have set for each forum. If they have Read Only access, then titles only display, if they have Read/Write, then show the smushed text, if they have No Access, then please hide these results appropriately from the search results.
Otherwise, we have a security breach, and the security policies we set "don't apply to search results" - which simply is not good.
Also - if you could add a few check boxes to the Settings Panels
Search Results: [x] Show titles of topics / replies only when read/only set for forum
Search Results: [x] clip text in search results to ##### <insert value here> words (or characters)
Search Results: [x] remove results that are not accessible by privilege according to security policies
Should I include a few images?
Excellent on the search results limitation. Thank you, an enhancement request: put this in the settings panel as a numeric override option?
To follow what I am saying: go to: https://datavaultAlliance.com as a guest, click Discussions, type in "snowflake" to the search, and hit search.
The results are: expanded text content of the posts themselves. (the content under: Do I need Hash Keys?) and other posts are visible with the search text.
Then - click the TITLE of the topic "Do I need Hash Keys?" - to bring it up in Topic view
The results are: (according to security policies) correct
"You don't have permissions to see this page, please REGISTER or LOGIN for further information."
So - there is a disconnect between the security policies set on the forum and what the search results show. The "search results" show the content of the topic, when the security policy says they don't have access to see the content without logging in.
What I am asking is that the search results "check the security policies" before displaying the entire content of the topic. I want/need guests to purchase access to the forums before they can have full visibility of the topic and replies.
Does this help explain what I am looking for? Happy to attach a few screen shots if necessary.
By the way, I LOVE wpForo - it's amazing, thank you for such an incredible product.
Hi @dlinstedt,
Thank you for providing us the detailed information.
I guess the guest usergroup has the "Read only access" on the forums. If so please provide us the full screenshot of the "Read only access" page. We'll need to see which of the Permissions are checked.
If you've changed the Forum access for the current usergroup (Guests), leave the screenshot of the current forum access you've attached in Forum permission section.
Hi Team,
Thank you so much for looking in to this. Here is a screenshot that you requested.
As stated: topic titles and forum title is the only visibility allowed by guest.
Search should either abide by these settings, OR search should have its own "security setting checkboxes" to leverage on a per forum / per category basis.
ok @dlinstedt,
Thank you very much we'll continue this testing. I'll update the topic asap.
Any news on this? I am wondering if progress has been made? I really need this fixed.
Thanks, Dan
Hi @dlinstedt,
yes, we've found the reason for the issue. The issue will be fixed in the next version release.
