1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Duplicate Guests can see who's online?

Discussion in 'Closed Suggestions' started by Floris, Jan 16, 2011.

  1. Floris

    Floris Guest


    Guest permissions are set to "can view" yes, and "can view profiles" yes.
    And everything else is forced to NO.
    But both should not have an effect on the who's online page.
  2. Mike

    Mike XenForo Developer Staff Member

    I can see that page without a problem (as a guest). Are you reporting seeing the page as a bug, or not? As far as the code is currently concerned, there are no permission checks on this page.
    Vincent likes this.
  3. Floris

    Floris Guest

    Yes, you can see it, which you shouldn't. There's no need to block users from viewing the content, but then following users and their profiles, etc, if it's intentional then it's not a bug, but then please move it as a suggestion - requesting a permission to 'can view currently active users: yes/no'.

    I can NOT imagine a reason why you want a private community but permit users to view who's on the community, what they are doing, what their stats are and what threads are created / being read, etc .

    unless i am simply not getting something.
    erich37 likes this.
  4. Brogan

    Brogan XenForo Moderator Staff Member

  5. Mike

    Mike XenForo Developer Staff Member

    The online list shouldn't leak any information that they can't see (ie, it's not going to leak a thread title they can't see, but it will say they're viewing a thread). I'll defer to the linked suggestion.

Share This Page