Duplicate Guests can see who's online?

[Floris]

http://wetalknation.net/online/

Guest permissions are set to "can view" yes, and "can view profiles" yes.
And everything else is forced to NO.
But both should not have an effect on the who's online page.

 

[Mike]

I can see that page without a problem (as a guest). Are you reporting seeing the page as a bug, or not? As far as the code is currently concerned, there are no permission checks on this page.

 

[Floris]

Yes, you can see it, which you shouldn't. There's no need to block users from viewing the content, but then following users and their profiles, etc, if it's intentional then it's not a bug, but then please move it as a suggestion - requesting a permission to 'can view currently active users: yes/no'.


I can NOT imagine a reason why you want a private community but permit users to view who's on the community, what they are doing, what their stats are and what threads are created / being read, etc .

unless i am simply not getting something.

 

[Paul B]

That has already been suggested: http://xenforo.com/community/threads/enable-disable-members-online-now-for-a-user-group.7378/

 

[Mike]

The online list shouldn't leak any information that they can't see (ie, it's not going to leak a thread title they can't see, but it will say they're viewing a thread). I'll defer to the linked suggestion.