We have successfully been using Discourse as our ticketing system for several months now. All has been going smoothly but I just realized that there is a security issue that I overlooked as it was hidden through obscurity until just now. Everything has been going fine with the exception that I had …

The Private Topics plugin was installed. Two things were going on: all topics were somehow created by the support_staff group and not by the individual users the setting “Private topics permitted groups” (Always show topics started by a member of these groups) included that support_staff group. …

I’m using that, and it doesn’t seem to be working. [תמונה] tknospdr: even though it’s set up as a private topic and supposed to only be visible to admins and our ‘support_staff’ group.

Can you please share your forum URL in a PM to me, together with a screenshot of the Category → Security tab of that category?

[תמונה] tknospdr: they can see posts from our support category even though it’s set up as a private topic What do you mean by “private topic”? We have “personal messages” but there’s no such concept as a “private topic”. BTW, how you describe things working is exactly how we use meta itself…

[תמונה] supermathie: We have “personal messages” but there’s no such concept as a “private topic”. Please scan up, there is a plug in literally called Private Topics, and that’s what I’m using.

Ah, OK, you should add that information to the OP.

Issue resolved. We did a PR on my brain and now everything is working. I misunderstood a setting in the plugin’s settings. Once I was schooled, everything works like it should. Thanks!

Explaining the mix-up would make this topic useful to future readers. With the current amount of detail all we know is “something was wrong and is now fixed”.

Sudden realization about issue with Ticket System (private topics plugin)

תמיכה

RGJ (Richard - Communiteq) 8 באפריל,‏ 2026,‏ 8:26pm 2

This is exactly why we developed Private Topics Plugin

נושא		תגובות	צפיות
Private Topics Plugin Plugin	104	6039	22 באפריל,‏ 2026
Private Topics - are they supported? Support	26	11162	1 ביוני,‏ 2018
Is there a way to create topics so that only topic creator can see their topics? Support	3	112	23 ביולי,‏ 2025
Is it possible to have a category where users only see their own topics Support	6	137	22 בדצמבר,‏ 2025
Discourse ignoring Category trust_level_0 (registered user) making posts public Support	19	5034	2 ביולי,‏ 2015

Sudden realization about issue with Ticket System (private topics plugin)

נושאים קשורים