Messages tab visible to non-group members

groups

(Joshua Rosenfeld) #1

Summary:

When loading a group page for a group I do not belong to, I can see the Messages tab on the left.

Steps to reproduce:

  1. Navigate to a group page you are not a part of.
  2. Look at left menu

Expected Results:

See 4 buttons, Posts, Topics, Mentions, Members

Actual Results:

See 5 buttons, Posts, Topics, Mentions, Members, Messages

Notes:

While the Messages button is there and can be clicked, no messages are shown so there does not appear to be a major privacy/security issue here.

Attachments:

Version:

Discourse 1.5.0.beta9 (meta.discourse.org)

System Information:

Windows 10 Pro, Chrome Stable 48


(Joshua Rosenfeld) #2

This can be closed. Fixed per:


(Alan Tan) #3