# Messages tab visible to non-group members

**URL:** https://meta.discourse.org/t/messages-tab-visible-to-non-group-members/38960
**Category:** Bug
**Tags:** groups
**Created:** [3 בפברואר,‏ 2016,‏ 3:57am UTC](https://meta.discourse.org/t/messages-tab-visible-to-non-group-members/38960 "2016-02-03T03:57:11Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [3 בפברואר,‏ 2016,‏ 3:57am UTC](https://meta.discourse.org/t/messages-tab-visible-to-non-group-members/38960/1 "2016-02-03T03:57:11Z")

</div>

**Summary:**

When loading a group page for a group I do not belong to, I can see the Messages tab on the left.

**Steps to reproduce:**

1. Navigate to a group page you are not a part of.
2. Look at left menu

**Expected Results:**

See 4 buttons, Posts, Topics, Mentions, Members

**Actual Results:**

See 5 buttons, Posts, Topics, Mentions, Members, **Messages**

**Notes:**

While the Messages button is there and can be clicked, no messages are shown so there does not appear to be a major privacy/security issue here.

**Attachments:**

 ![](https://global.discourse-cdn.com/meta/original/3X/6/9/699e50a5bdbd113e91370497dc7fe38b4cb61fe8.png)

**Version:**

Discourse 1.5.0.beta9 ([meta.discourse.org](https://meta.discourse.org/))

**System Information:**

Windows 10 Pro, Chrome Stable 48

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [11 ביולי,‏ 2016,‏ 3:28am UTC](https://meta.discourse.org/t/messages-tab-visible-to-non-group-members/38960/2 "2016-07-11T03:28:32Z")

</div>

This can be closed. Fixed per:

> [@Group pages should not show Messages tab to unauthorised users](https://meta.discourse.org/t/group-pages-should-not-show-messages-tab-to-unauthorised-users/46946/3):
>
> Done via:

---

<div class="post-metadata">

### Author: ![tgxworld](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tgxworld/32/106117_2.png) [@tgxworld](https://meta.discourse.org/u/tgxworld)
#### Post date: [11 ביולי,‏ 2016,‏ 3:44am UTC](https://meta.discourse.org/t/messages-tab-visible-to-non-group-members/38960/3 "2016-07-11T03:44:49Z")

</div>