# Tag groups page is available without authorization
**URL:** https://meta.discourse.org/t/tag-groups-page-is-available-without-authorization/97303
**Category:** Bug
**Created:** [September 16, 2018, 6:35pm UTC](https://meta.discourse.org/t/tag-groups-page-is-available-without-authorization/97303 "2018-09-16T18:35:57Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@volas](https://meta.discourse.org/u/volas)
#### Post date: [September 16, 2018, 6:35pm UTC](https://meta.discourse.org/t/tag-groups-page-is-available-without-authorization/97303/1 "2018-09-16T18:35:57Z")
As guest you can open and see `/tag_groups` page with all staff buttons and controls, for example:
[https://meta.discourse.org/tag\_groups/](https://meta.discourse.org/tag_groups/)
[https://meta.discourse.org/tag\_groups/1](https://meta.discourse.org/tag_groups/1)
**That’s only cosmetic bug** , any changes there are not saved (“Forbidden” response from server), and no private information also - so it’s public bug report.
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [September 16, 2018, 11:28pm UTC](https://meta.discourse.org/t/tag-groups-page-is-available-without-authorization/97303/2 "2018-09-16T23:28:34Z")
Agree, this is pretty confusing to anonymous.
@neil perhaps we should just restrict the route to staff? Can anyone else mess with tag groups?
---
### Author:  [@neil](https://meta.discourse.org/u/neil)
#### Post date: [September 17, 2018, 3:42pm UTC](https://meta.discourse.org/t/tag-groups-page-is-available-without-authorization/97303/4 "2018-09-17T15:42:48Z")
Agreed there’s no point showing those pages to non-staff users. I restricted them to staff.
---
### Author:  [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [September 17, 2018, 6:09pm UTC](https://meta.discourse.org/t/tag-groups-page-is-available-without-authorization/97303/5 "2018-09-17T18:09:28Z")
Whoa - that is freaky. Is it going to be restricted on all sites now, @neil, or do I have to do something to restrict access on my site?
---
### Author:  [@neil](https://meta.discourse.org/u/neil)
#### Post date: [September 17, 2018, 6:10pm UTC](https://meta.discourse.org/t/tag-groups-page-is-available-without-authorization/97303/6 "2018-09-17T18:10:17Z")
It will be restricted for all sites.
---
### Author:  [@neil](https://meta.discourse.org/u/neil)
#### Post date: [September 17, 2018, 10:00pm UTC](https://meta.discourse.org/t/tag-groups-page-is-available-without-authorization/97303/7 "2018-09-17T22:00:02Z")
This topic was automatically closed after 6 hours. New replies are no longer allowed.