We have successfully been using Discourse as our ticketing system for several months now. All has been going smoothly but I just realized that there is a security issue that I overlooked as it was hidden through obscurity until just now. Everything has been going fine with the exception that I had …

The Private Topics plugin was installed. Two things were going on: all topics were somehow created by the support_staff group and not by the individual users the setting “Private topics permitted groups” (Always show topics started by a member of these groups) included that support_staff group. …

I’m using that, and it doesn’t seem to be working. [image] tknospdr: even though it’s set up as a private topic and supposed to only be visible to admins and our ‘support_staff’ group.

Can you please share your forum URL in a PM to me, together with a screenshot of the Category → Security tab of that category?

[image] tknospdr: they can see posts from our support category even though it’s set up as a private topic What do you mean by “private topic”? We have “personal messages” but there’s no such concept as a “private topic”. BTW, how you describe things working is exactly how we use meta itself…

[image] supermathie: We have “personal messages” but there’s no such concept as a “private topic”. Please scan up, there is a plug in literally called Private Topics, and that’s what I’m using.

Ah, OK, you should add that information to the OP.

Issue resolved. We did a PR on my brain and now everything is working. I misunderstood a setting in the plugin’s settings. Once I was schooled, everything works like it should. Thanks!

Explaining the mix-up would make this topic useful to future readers. With the current amount of detail all we know is “something was wrong and is now fixed”.

Sudden realization about issue with Ticket System (private topics plugin)

Support

RGJ (Richard - Communiteq) April 8, 2026, 8:26pm 2

This is exactly why we developed Private Topics Plugin

2 Likes

Topic		Replies	Views
Private Topics Plugin Plugin	103	5430	March 7, 2026
Private Topics - are they supported? Support	27	11040	December 5, 2020
Is there a way to create topics so that only topic creator can see their topics? Support	5	79	August 22, 2025
Discourse ignoring Category trust_level_0 (registered user) making posts public Support	20	4955	July 11, 2015
Is it possible to have a category where users only see their own topics Support	7	94	January 21, 2026

Sudden realization about issue with Ticket System (private topics plugin)

Related topics