# Discourse Category Lockdown

**URL:** https://meta.discourse.org/t/discourse-category-lockdown/70649
**Category:** Plugin
**Tags:** pavilion
**Created:** [September 23, 2017, 9:26pm UTC](https://meta.discourse.org/t/discourse-category-lockdown/70649 "2017-09-23T21:26:39Z")
**Posts on this page:** 1
**Showing post:** 93

<div class="post-metadata">

### Author: ![Aizada\_M](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/aizada_m/32/352050_2.png) [@Aizada\_M](https://meta.discourse.org/u/Aizada_M)
#### Post date: [December 14, 2023, 8:09pm UTC](https://meta.discourse.org/t/discourse-category-lockdown/70649/93 "2023-12-14T20:09:15Z")

</div>

Greetings dear Discourse team and forum users! I recently installed this templates plugin in composer and am actively testing it these days.

> [@Discourse Templates](https://meta.discourse.org/t/discourse-templates/229250):
>
> discourse2Summary Discourse Templates allows the creation of content templates for repeated use. The templates are stored as topics in a special category, where they can be edited and discussed as needed.open_bookInstall Guide This plugin is bundled with Discourse core. There is no need to install the plugin separately.information_source This plugin is pretty much a new version of [Discourse Canned Replies](https://meta.discourse.org/t/discourse-canned-replies/48296) but it is more flexible and stores the templates in a differen…

Today I discovered that it violates the privacy of hidden topics provided by the [Category Lockdown](https://meta.discourse.org/t/advertise-activity-in-a-private-category-discourse-category-lockdown/7064) plugin )

 ![image](https://global.discourse-cdn.com/meta/original/4X/8/c/4/8c4ac8b1a8666f3066822bbfd7be279e8a6b7ca8.png)

If a user has access to a category but cannot view topics in that category, they can easily bypass these restrictions by using the insert template feature in the post editor. Where all hidden topics are presented as templates. The fact is that on my site, in certain categories, each theme is a template to which a select group of users has access. Although these template themes are hidden from general users, the categories of these themes are not hidden as we are trying to promote these templates using the Category Lockdown plugin.  
Here is the video report.

For this video, I logged into the forum as a regular user, who does not have access to the hidden topic. But as you can see, the user easily bypassed the restriction and saw the contents of the topic.

---

_[View the full topic](https://meta.discourse.org/t/discourse-category-lockdown/70649)._