# Moderators still able to access other users bookmarks

**URL:** https://meta.discourse.org/t/moderators-still-able-to-access-other-users-bookmarks/38962
**Category:** Bug
**Created:** [2월 3, 2016, 5:59오전 UTC](https://meta.discourse.org/t/moderators-still-able-to-access-other-users-bookmarks/38962 "2016-02-03T05:59:08Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [2월 3, 2016, 5:59오전 UTC](https://meta.discourse.org/t/moderators-still-able-to-access-other-users-bookmarks/38962/1 "2016-02-03T05:59:08Z")

</div>

**Summary:**

When the changes were made to the user profile page, moderators were supposed to lose access to other users bookmarks. While the tab was removed from the left menu, if a moderator navigates to another user’s profile directly by URL, they are still given access to the bookmarks.

**Steps to reproduce:**

1. Navigate to $site\_url/users/user\_name\_here/activity/bookmarks as moderator

**Expected Results:**

Receive access denied error message

**Actual Results:**

View user’s bookmarks

**Notes:**

Continuing the discussion from [Moderators cannot view bookmarks on other user’s activity pages](https://meta.discourse.org/t/moderators-cannot-view-bookmarks-on-other-users-activity-pages/37349)

**Attachments:**

None for privacy reasons.

**Version:**

Discourse 1.5.0.beta9 ([discourse.stonehearth.net](http://discourse.stonehearth.net/))

**System Information:**

Windows 10 Pro, Chrome Stable 48

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [4월 3, 2016, 11:47오후 UTC](https://meta.discourse.org/t/moderators-still-able-to-access-other-users-bookmarks/38962/2 "2016-04-03T23:47:07Z")

</div>

This seems to be resolved as of 1.6.0.beta1. Attempting to modify the URL to point to another user no longer displays their bookmarks, it instead displays a (mostly) blank profile page.

 ![](https://global.discourse-cdn.com/meta/original/3X/9/7/9710ba20829bb3d134b3023c9a48ef644b807f63.png)

---

<div class="post-metadata">

### Author: ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)
#### Post date: [4월 4, 2016, 2:17오전 UTC](https://meta.discourse.org/t/moderators-still-able-to-access-other-users-bookmarks/38962/3 "2016-04-04T02:17:53Z")

</div>