mahara-contributors team mailing list archive

[Allie Davidson <allie.davidson@xxxxxxxxxxx>]

Public bug reported:

Group settings are set to:
•	Open: NO
•	Controlled: YES
•	Request: NO
•	Publicly viewable group: NO
•	Hide group: YES
•	Hide membership: YES
•	Hide members from members: NO

If a user figures out the unique URL that points to a group, they are
able to see the group homepage. It displays the general group info
(including who the admin is) and if the submission option is turned on,
they can also see the “submit a page or collection to this group” option
(see screenshot). If they try to submit to the group, it says access
denied.

Ideally, if a group is (1) closed, (2) users cannot request membership
and (3) “hidden”, when a user who is not a member tries to view the
group, the page should say “Access Denied”.

** Affects: mahara
     Importance: Undecided
         Status: New

** Attachment added: "Screenshot of demo group.png"
   https://bugs.launchpad.net/bugs/1708471/+attachment/4926545/+files/Screenshot%20of%20demo%20group.png

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1708471

Title:
  Users who are not members of a group are still able to see the group
  and see the option to submit to the group.

Status in Mahara:
  New

Bug description:
  Group settings are set to:
  •	Open: NO
  •	Controlled: YES
  •	Request: NO
  •	Publicly viewable group: NO
  •	Hide group: YES
  •	Hide membership: YES
  •	Hide members from members: NO

  If a user figures out the unique URL that points to a group, they are
  able to see the group homepage. It displays the general group info
  (including who the admin is) and if the submission option is turned
  on, they can also see the “submit a page or collection to this group”
  option (see screenshot). If they try to submit to the group, it says
  access denied.

  Ideally, if a group is (1) closed, (2) users cannot request membership
  and (3) “hidden”, when a user who is not a member tries to view the
  group, the page should say “Access Denied”.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1708471/+subscriptions