mahara-contributors team mailing list archive

[Kristina Hoeppner <1708471@xxxxxxxxxxxxxxxxxx>]

I could replicate this as well.

I think there are a few things here that we'll keep separate.

1. When you are not a member of the group and submissions are allowed,
you shouldn't have the possibility to submit a group only to end up on
"Access denied". Only people who are allowed to submit portfolios to a
group should see that option.

This is the bug here.

2. When a group is hidden from non-group members, non-group members
should not be able to access the group homepage and any other parts of a
group even if they reach them via the direct URL and only receive
"Access denied".

This is a wishlist item. Currently, the "hide" functionality only hides
the group on "Find groups". The wishlist item is at bug #1724409.

** Summary changed:

- Users who are not members of a group are still able to see the group and see the option to submit to the group.
+ Non-group members can still see portfolio submission option in group

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1708471

Title:
  Non-group members can still see portfolio submission option in group

Status in Mahara:
  Confirmed

Bug description:
  Group settings are set to:
  •	Open: NO
  •	Controlled: YES
  •	Request: NO
  •	Publicly viewable group: NO
  •	Hide group: YES
  •	Hide membership: YES
  •	Hide members from members: NO

  If a user figures out the unique URL that points to a group, they are
  able to see the group homepage. It displays the general group info
  (including who the admin is) and if the submission option is turned
  on, they can also see the “submit a page or collection to this group”
  option (see screenshot). If they try to submit to the group, it says
  access denied.

  Ideally, if a group is (1) closed, (2) users cannot request membership
  and (3) “hidden”, when a user who is not a member tries to view the
  group, the page should say “Access Denied”.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1708471/+subscriptions