# Top Links in Private Categories expose Private Topic Titles to Everyone

**URL:** https://meta.discourse.org/t/top-links-in-private-categories-expose-private-topic-titles-to-everyone/43499
**Category:** Bug
**Created:** [30 באפריל,‏ 2016,‏ 11:58am UTC](https://meta.discourse.org/t/top-links-in-private-categories-expose-private-topic-titles-to-everyone/43499 "2016-04-30T11:58:33Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [30 באפריל,‏ 2016,‏ 11:58am UTC](https://meta.discourse.org/t/top-links-in-private-categories-expose-private-topic-titles-to-everyone/43499/1 "2016-04-30T11:58:33Z")

</div>

Repo Steps:

1. Create a topic with a link in a Private Category
2. Have several accounts with access click the link (so it increases the chances of it appearing on the Top Links)
3. Logout and visit your profile, the Private Category Topic Title is exposed since the link is in a Private Category
4. Clicking the Private Topic Title gets you the “You need to log in to see that topic” message

Expected:

1. Private Category Links shouldn’t be exposed via Top Links

Example at  
[https://sandbox.cpradio.org/users/cpradio/summary](https://sandbox.cpradio.org/users/cpradio/summary)

 ![](https://global.discourse-cdn.com/meta/original/3X/8/3/83dcf49ee40ef15735d02b3d44f820a2da8b2e41.png)

_Note: It appears 4 times because I wrote 4 posts in the private topic with the same links, so they link to 4 separate posts_

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [2 במאי,‏ 2016,‏ 1:27pm UTC](https://meta.discourse.org/t/top-links-in-private-categories-expose-private-topic-titles-to-everyone/43499/2 "2016-05-02T13:27:29Z")

</div>

Thanks for the detailed report 👍

Here’s the fix 🍎

[https://github.com/discourse/discourse/commit/e2928f78d21c26e7e8337664cf6f4c8e80dbc437](https://github.com/discourse/discourse/commit/e2928f78d21c26e7e8337664cf6f4c8e80dbc437)

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [3 במאי,‏ 2016,‏ 1:28am UTC](https://meta.discourse.org/t/top-links-in-private-categories-expose-private-topic-titles-to-everyone/43499/3 "2016-05-03T01:28:01Z")

</div>

This topic was automatically closed after 12 hours. New replies are no longer allowed.