User Access: back door over people profile posts

Posted by intercitylife on Sep 14, 2013; 2:13pm
URL: https://support.nabble.com/User-Access-back-door-over-people-profile-posts-tp7586492.html

Hello
I have the following situation:
- I hide / made unaccessible the sub-forum "A" to "anyone", only allowing access to a certain group
- OK: For "anyone" (not logged in visitors) the sub-forum is correctly not shown and therefore there is no access
- NOK (security backdoor): If a not authorized "anyone" is going to people and selects there the profile having created the prohibited posts, it is here possible to enter/view the posts. Clicking from here to the sub-forum (on top forum level correctly not shown sub-forum) where the post is located, then however it again correctly does ask for login.
I would like to have this closed and hope it's a good hint anyway.
Thanks and cheers