# Valid users get empty RSS for restricted categories
**URL:** https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051
**Category:** Bug
**Tags:** rss
**Created:** [2015年六月15日 17:08 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051 "2015-06-15T17:08:09Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@downey](https://meta.discourse.org/u/downey)
#### Post date: [2015年六月15日 17:08 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/1 "2015-06-15T17:08:09Z")
**Reproduce:**
1. Be authenticated as a user with valid access to a restricted category such as: [https://meta.discourse.org/c/lounge](https://meta.discourse.org/c/lounge)
2. In the same session, view the RSS feed for that category, e.g., [https://meta.discourse.org/c/lounge.rss](https://meta.discourse.org/c/lounge.rss)
**Expected results:**
- Topics for that category appear in the feed for valid users.
- 404 for invalid/anonymous sessions.
**Actual results:**
- **No topics appear** in the category RSS feed for valid users.
- 404 for invalid/anonymous sessions.
---
### Author:  [@dax](https://meta.discourse.org/u/dax)
#### Post date: [2016年三月7日 22:09 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/2 "2016-03-07T22:09:12Z")
Is there no fix for this bug yet?
---
### Author:  [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [2016年三月7日 22:28 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/3 "2016-03-07T22:28:55Z")
> [@Trash](#):
>
> Is there no fix for this bug yet?
I think the fix is to make the category _not_ restricted.
Else I’m not seeing the use case for someone wanting to view a topic in RSS format while they’re logged into the forum and can see it as a page.
And if the category is restricted, letting it be an RSS feed external to the forum would defeat the intent of it being restricted, no?
What am I not seeing here?
---
### Author:  [@dax](https://meta.discourse.org/u/dax)
#### Post date: [2016年三月7日 22:46 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/4 "2016-03-07T22:46:41Z")
Well, we have a chat too and a private channel for our team. It will be great if we can use rss to add automatically (via bot) new topics or posts from our restricted categories to our private channel, like we used to do for all the other (public) categories and the community channels.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [2016年三月7日 22:50 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/5 "2016-03-07T22:50:40Z")
Was this fixed here already @tgxworld?
[https://github.com/discourse/discourse/commit/bc4087b9bb32c9b45ec3b41f9f60e0f36191b033](https://github.com/discourse/discourse/commit/bc4087b9bb32c9b45ec3b41f9f60e0f36191b033)
---
### Author:  [@dax](https://meta.discourse.org/u/dax)
#### Post date: [2016年三月7日 22:59 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/6 "2016-03-07T22:59:26Z")
Clicking here [https://meta.discourse.org/c/lounge.rss](https://meta.discourse.org/c/lounge.rss) it seems not fixed yet:
---
### Author:  [@riking](https://meta.discourse.org/u/riking)
#### Post date: [2016年三月7日 23:50 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/7 "2016-03-07T23:50:56Z")
Ooh, that’s a data leak. I don’t think the category description for restricted categories is supposed to be public.
---
### Author:  [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [2016年三月8日 00:00 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/8 "2016-03-08T00:00:52Z")
You’d have to utilize an API Key to get that to show anything right? (assuming that is supported)
So @Trash, if you have a user who has access to the restricted category and is assigned an API key, see if appending the api\_username and api\_key to the URL makes it return data.
**Edit:** I just tried passing an API username and key to a restricted category for an RSS feed and didn’t get the data, so it seems the RSS implementation isn’t looking for a key for validation. But the category json does return the detail.
---
### Author:  [@tgxworld](https://meta.discourse.org/u/tgxworld)
#### Post date: [2016年三月8日 00:13 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/9 "2016-03-08T00:13:35Z")
Don’t think so. That fix was for RSS poll feed.
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [2022年七月21日 05:41 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/10 "2022-07-21T05:41:25Z")
我们最近看起来不错。
为了在此处添加一些内容，我们还支持用户 API 密钥和作用域 API 密钥，这些密钥可以解锁秘密 RSS 集成。
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [2022年七月21日 05:41 UTC](https://meta.discourse.org/t/valid-users-get-empty-rss-for-restricted-categories/30051/11 "2022-07-21T05:41:27Z")