Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Private and Hidden Forum content shown in activity stream

  • Participant
    Level: Enlightened
    Posts: 39
    AJ on April 14, 2019 at 7:10 am #22280

    Hi Brajesh,

    https://cl.ly/a39d9b5e4d20

    You can see this post in the activity stream, even if you are not allowed to see the content of the forum, topics and replies.

    Is this normal behaviour?
    Can it be prevented?

    This is the HTML I use now to show the stream:

    [activity-stream role=editor,author,contributor,subscriber per_page=3 allow_posting=1]

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on April 14, 2019 at 3:09 pm #22281

    Hi AJ,
    Are you seeing the same behaviour without using shortcode? The shotrcode should respect the activity visibility.

    It seems to me either the activities are visible for the roles or somehow they were not marked as private.

    Regards
    Brajesh

You must be logged in to reply to this topic.

This topic is: not resolved