Summary:
When loading a group page for a group I do not belong to, I can see the Messages tab on the left.
Steps to reproduce:
- Navigate to a group page you are not a part of.
- Look at left menu
Expected Results:
See 4 buttons, Posts, Topics, Mentions, Members
Actual Results:
See 5 buttons, Posts, Topics, Mentions, Members, Messages
Notes:
While the Messages button is there and can be clicked, no messages are shown so there does not appear to be a major privacy/security issue here.
Attachments:
Version:
Discourse 1.5.0.beta9 (meta.discourse.org)
System Information:
Windows 10 Pro, Chrome Stable 48