- Affected version
- 2.2.6 patch 2
So, I'm not sure if this is a bug, or a feature, but it's a bug to me!
I created a node and did not include it in the directory by unchecking "Display in the node list". I did this because I wanted to post a number of story contest entries ahead of the midnight deadline so that at midnight, I could simply make the folder visible, and the contents.
Well, imagine my surprise when I double checked my work, three stories in, when I logged out as an Admin and logged in as a regular user and went to New Posts and found the stories listed! Worse, I was able to click and go right to them! Ack!
My thought is that if the directory is not in the node list, nothing within should be accessible either unless you know the exact URL.
Am I wrong?
I guess what I will need to do is create the directory in an Admin only section, and post there, with only me having access.
I created a node and did not include it in the directory by unchecking "Display in the node list". I did this because I wanted to post a number of story contest entries ahead of the midnight deadline so that at midnight, I could simply make the folder visible, and the contents.
Well, imagine my surprise when I double checked my work, three stories in, when I logged out as an Admin and logged in as a regular user and went to New Posts and found the stories listed! Worse, I was able to click and go right to them! Ack!
My thought is that if the directory is not in the node list, nothing within should be accessible either unless you know the exact URL.
Am I wrong?
I guess what I will need to do is create the directory in an Admin only section, and post there, with only me having access.