# Activity Summary included content of posts to which user no longer had access
**URL:** https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167
**Category:** Support
**Tags:** activity-summary
**Created:** [September 7, 2023, 2:05pm UTC](https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167 "2023-09-07T14:05:46Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@inducer](https://meta.discourse.org/u/inducer)
#### Post date: [September 7, 2023, 2:05pm UTC](https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167/1 "2023-09-07T14:05:46Z")
I use Discourse for discussion in an academic setting, and I have different courses separated out by groups and categories, so that they cannot see each others’ posts. That works well, with one troublesome exception: Digest emails seem to include titles and excerpts for topics to which the email recipient does not have access. Evidence of this is that when the users clicks the link in the email, they get a 404 page.
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [September 7, 2023, 2:14pm UTC](https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167/2 "2023-09-07T14:14:28Z")
That does sound like a bug. I’d think that there are pretty good specs for that case, though. Do you have any plugins that might be changing things?
Could some posts in a public category be referring to private topics?
You can test what digests will get sent for a particular user at `/admin/emails/preview summary`.
---
### Author:  [@inducer](https://meta.discourse.org/u/inducer)
#### Post date: [September 7, 2023, 2:20pm UTC](https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167/4 "2023-09-07T14:20:35Z")
As far as plugins go, I have `discourse-math`, `discourse-canned-reply`, `discourse-solved`, and `discourse-openid-connect`. I don’t see a straightforward reason why any of them would affect this. I’m on Discourse 3.1.0 FWIW.
If I use the summary preview feature for the user who reported this, I now only get an empty box. But I have a screenshot of their email that clearly shows posts in a category to which they don’t have access included in the summary.
---
### Author:  [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [September 7, 2023, 3:05pm UTC](https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167/6 "2023-09-07T15:05:35Z")
Any chance the category was not private at the time of the email? Or that the user had access to it at that time? You can check category permissions activity under Staff Action Logs, filter that view by “change category settings”.
I did a quick test locally, and I can’t reproduce this issue with either the preview or a manually sent digest.
---
### Author:  [@inducer](https://meta.discourse.org/u/inducer)
#### Post date: [September 7, 2023, 7:58pm UTC](https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167/7 "2023-09-07T19:58:15Z")
Yikes, you are all correct. The access privileges for the category had in fact changed between when the user in question received the email and when I received their report. Nothing to see here AFAICT, and sorry about the noise!
---
### Author:  [@pmusaraj](https://meta.discourse.org/u/pmusaraj)
#### Post date: [September 7, 2023, 9:09pm UTC](https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167/8 "2023-09-07T21:09:35Z")
No worries, thank you for following up.
---
### Author:  [@nat](https://meta.discourse.org/u/nat)
#### Post date: [September 28, 2023, 11:56am UTC](https://meta.discourse.org/t/activity-summary-included-content-of-posts-to-which-user-no-longer-had-access/278167/9 "2023-09-28T11:56:44Z")