# Warning on @mentions and security permissions

**URL:** https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592
**Category:** Bug
**Created:** [11월 22, 2017, 3:26오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592 "2017-11-22T15:26:53Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![outofthebox](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/outofthebox/32/83708_2.png) [@outofthebox](https://meta.discourse.org/u/outofthebox)
#### Post date: [11월 22, 2017, 3:26오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592/1 "2017-11-22T15:26:53Z")

</div>

Hi, today I was demoing Discourse for a colleague. I was @mentioning her in a test Category where she didn’t have access. We were quite confused why she wasn’t seeing them. Then I fixed the permissions and then all was fine. Is there a bug here? Or is it a feature request that there’s notice the @mention won’t be received?

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [11월 22, 2017, 3:30오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592/2 "2017-11-22T15:30:22Z")

</div>

Seems like a regression of some sort. As I can verify it happens on an older version of Discourse. But it doesn’t happen here at Meta.

---

<div class="post-metadata">

### Author: ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [11월 22, 2017, 4:55오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592/3 "2017-11-22T16:55:28Z")

</div>

Could indeed be a regression due to the recent work on the composer.

Added to my list :memo:.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [11월 22, 2017, 10:34오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592/4 "2017-11-22T22:34:32Z")

</div>

Hmm, no, I’ve seen the warning popup recently (in a PM, though), so I know it is working in PMs at least.

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [11월 22, 2017, 10:51오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592/5 "2017-11-22T22:51:01Z")

</div>

That could be. I noticed it working on Sitepoint in restricted categories, but it doesn’t work here in a restricted category (I tried two of them)

---

<div class="post-metadata">

### Author: ![maja](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/maja/32/129533_2.png) [@maja](https://meta.discourse.org/u/maja)
#### Post date: [7월 12, 2018, 2:53오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592/7 "2018-07-12T14:53:40Z")

</div>

I tried to reproduce this bug but by now it seems to be working fine. Perhaps you mentioned your colleague when creating a new topic, @outofthebox? Mention warnings are working only when writing replies, they weren’t supported for the new topic/message posts from the start.

---

<div class="post-metadata">

### Author: ![outofthebox](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/outofthebox/32/83708_2.png) [@outofthebox](https://meta.discourse.org/u/outofthebox)
#### Post date: [7월 12, 2018, 3:07오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592/8 "2018-07-12T15:07:08Z")

</div>

Hi, @maja, great insight. Yes, it was an @mention in a new Topic. I can see that behavior today - @mentioning someone, in a new Topic, with permissions in a Category where they don’t have access doesn’t provide a warning dialogue box.

I understand the specific focus of this feature better now. Thank you.

---

<div class="post-metadata">

### Author: ![maja](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/maja/32/129533_2.png) [@maja](https://meta.discourse.org/u/maja)
#### Post date: [7월 12, 2018, 7:41오후 UTC](https://meta.discourse.org/t/warning-on-mentions-and-security-permissions/74592/9 "2018-07-12T19:41:34Z")

</div>


