# Why does detailed 404 security setting not explain why I can't access subcategory?

**URL:** https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423
**Category:** Support
**Created:** [April 27, 2020, 9:56am UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423 "2020-04-27T09:56:27Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![Nikki\_Locke](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nikki_locke/32/146184_2.png) [@Nikki\_Locke](https://meta.discourse.org/u/Nikki_Locke)
#### Post date: [April 27, 2020, 9:56am UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423/1 "2020-04-27T09:56:28Z")

</div>

We have used Discourse groups extensively so that people have to join a group to see most subcategories.

People are now complaining that, if someone sends them a link to something which is in a group they are not a member of, they get a mystifying 404 page that tells them nothing.

I would like the page to tell them which group the subcategory is in (with a link to the group, if it is public or invite only).

I stumbled on the “detailed 404” setting under Security, and turned it on. Now things are even worse! The page you get to looks the same, but the url at the top is no longer the url the user pasted in, but /404. There is no information visible on the page to tell you why it is private.

The page source is quite different, however, and there is a header:

```
    <meta name="description" content="This forum is owned by Wigan Local Group. It is a public discussion forum for the work of the group. Enquire here to contact us or join any of our private forums.">

```

(This is the forum description post).

Is there some other setting somewhere that I need to change to make this work as designed?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [April 28, 2020, 4:51am UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423/2 "2020-04-28T04:51:22Z")

</div>

Can you provide specific URLs as examples? I am having trouble understanding what you’ve written here.

---

<div class="post-metadata">

### Author: ![Nikki\_Locke](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nikki_locke/32/146184_2.png) [@Nikki\_Locke](https://meta.discourse.org/u/Nikki_Locke)
#### Post date: [April 29, 2020, 8:12pm UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423/3 "2020-04-29T20:12:36Z")

</div>

Difficult, as out server is not open to the public. If you would like to PM me your email address, I can invite you to it.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [April 29, 2020, 9:40pm UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423/4 "2020-04-29T21:40:29Z")

</div>

Can you provide representative URLs with the relevant bits (domain, etc) changed to other nonsense words?

---

<div class="post-metadata">

### Author: ![justin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/justin/32/157614_2.png) [@justin](https://meta.discourse.org/u/justin)
#### Post date: [April 29, 2020, 11:06pm UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423/5 "2020-04-29T23:06:26Z")

</div>

I think what you’re describing is normal behavior for the site.

Instead of the 404 page showing on categories that a user does not have access to, you want a page that shows them what the category is and to be able to join the group to access it?

There’s no way to configure this in Discourse, but you could get someone to write a plugin for this in #Marketplace. This isn’t a trivial effort, though, so you will need to have a reasonable budget for this.

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [April 30, 2020, 6:34am UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423/6 "2020-04-30T06:34:03Z")

</div>

> [@Nikki\_Locke](#):
>
> People are now complaining that, if someone sends them a link to something which is in a group they are not a member of, they get a mystifying 404 page that tells them nothing.

The alternative is to acknowledge that a post or category exists, potentially leaking information.

---

<div class="post-metadata">

### Author: ![Nikki\_Locke](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nikki_locke/32/146184_2.png) [@Nikki\_Locke](https://meta.discourse.org/u/Nikki_Locke)
#### Post date: [April 30, 2020, 7:25am UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423/7 "2020-04-30T07:25:10Z")

</div>

Thanks. If that is the case, what is the detailed 404 setting for, then?

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [June 19, 2024, 7:30am UTC](https://meta.discourse.org/t/why-does-detailed-404-security-setting-not-explain-why-i-cant-access-subcategory/149423/8 "2024-06-19T07:30:28Z")

</div>


