# What does "only visible to members of group:" tell me?

**URL:** <https://meta.discourse.org/t/what-does-only-visible-to-members-of-group-tell-me/224144>\
**Category:** Bug\
**Created:** [April 13, 2022, 11:26am UTC](https://meta.discourse.org/t/what-does-only-visible-to-members-of-group-tell-me/224144 "2022-04-13T11:26:43Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![jamie.wilson](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jamie.wilson/32/185466_2.png) [@jamie.wilson](https://meta.discourse.org/u/jamie.wilson)\
**Post date:** [April 13, 2022, 7:18pm UTC](https://meta.discourse.org/t/what-does-only-visible-to-members-of-group-tell-me/224144/7 "2022-04-13T19:18:58Z")

</div>

> [@tgxworld](#):
>
> Do you know if this is intended as I do not think I changed anything as part of the security fix?

It looks like we need to refine the logic in `visible_groups` a little more.

In this case, since `theme_authors` is visible to Everyone, the warning is superfluous.

[SECURITY: Category group permissions leaked to normal users. · discourse/discourse@0f7b987 · GitHub](https://github.com/discourse/discourse/commit/0f7b9878ff3207ce20970f0517604793920bb3d2#diff-a60e90239f652f8f970c88ae190d7206f8b2d91d0dbbc1f274ff7fae59097243L43)

It looks like we lost that logic when this line was removed. We’ll need something similar on the backend, since we’re not exposing that info to the client anymore.

---

_[View the full topic](https://meta.discourse.org/t/what-does-only-visible-to-members-of-group-tell-me/224144)._