Private Forum: what about RSS-feeds ?

[erich37]

I am running a "Private Community Forum" whereby Member-Profiles, Forum-Threads and Member-List, Recentr Activity, Search, etc. is set to "private".

What about RSS-Feeds ? I mean the orange button for RSS in the footer ?

Question:
Do I need to set this "RSS Button" to private (hide this button from guests) as well, so that unregistered guests can not subscribe to RSS-feeds of my Private Website ?


Appreciate your help!
Many thanks!

 

[jmurrayhead]

The feed should only show them forums that they have access to.

 

[HWS]

The feed should only show them forums that they have access to.

As "the feed" does not know what each feed viewer is allowed to see, the feed should only show things allowed for public view. Which translates into "NO" content for a private forum.

erich37: Can you please post if you find out that this is not the case. Because that would be a bug worth to know about.

 

[erich37]

I have now hidden this orange "RSS Feed Button" in the footer for guests, as I am not sure whether guests would be able to subscribe to member-profiles or content via RSS.

If "guests" would be able to subscribe to content or data which is hidden, then this might be a bug.......

 

[HWS]

To hide the RSS symbol is not protecting anyone from subscribing to a feed. Many browsers show subscribable Feeds with their own features.

 

[jmurrayhead]

As "the feed" does not know what each feed viewer is allowed to see, the feed should only show things allowed for public view. Which translates into "NO" content for a private forum.

erich37: Can you please post if you find out that this is not the case. Because that would be a bug worth to know about.

The code that creates the feed does, though. The feed that I see when I'm logged into my site is much different from the feed that I see when I'm logged out.

 

[tenants]

One a similar note, a while back I thought this was a bug:

(but it is not a bug) http://xenforo.com/community/thread...y-unapproved-thread-posts-vis-rss-feed.27141/

RSS feed does check permisions (private forums will not show up on the rss feed if you do not have permisions to that feed)
As mentioned, a simple check.. get the url of that feed, log out then check the feed

 

[erich37]

One a similar note, a while back I thought this was a bug:

(but it is not a bug) http://xenforo.com/community/thread...y-unapproved-thread-posts-vis-rss-feed.27141/

RSS feed does check permisions (private forums will not show up on the rss feed if you do not have permisions to that feed)
As mentioned, a simple check.. get the url of that feed, log out then check the feed

so user-profiles and user-avatars will also not be shown via the RSS-feed button which is located in the footer ?

 

[tenants]

I didn't know profiles / avatars were included in RSS feed any where (RSS is pretty much used for feeding threads in XF)

Best way to check, log out and go to the URL, for example:

http://xenforo.com/community/forums/-/index.rss

and the RSS URL where ever you've seen profiles / avatars RSS (I'm not sure where this is though)

The footer RSS feed is consistently the index feed (thread titles from all forums that you have permission to)
The RSS feed next to each forum shows only thread titles in that particular forums that you have permission to, for example : http://xenforo.com/community/forums/have-you-seen/index.rss

I dont think this exists: http://xenforo.com/community/members/index.rss (and I'm not sure why it would, profiles don't make particulary good feeds)

Or did you mean, profile names will not be mentioned in the RSS feed...If so, I think it just includes the title and the time stamp.

Do you have an example of your RSS where usernames / profiles are shown