29th / personnel-v2

Personnel management system version 2 (legacy)
4 stars 7 forks source link

Members receive notifications about posts they cannot access on the Forums #350

Open Cooke29thID opened 9 years ago

Cooke29thID commented 9 years ago

Cpl. Vlad has informed me that he is receiving notifications about posts that he cannot, and should not be seeing, on the Able Company Headquarters child board of Able Company Command Post. I don't know if others are having similar problems, but this poses a risk of people learning about information they shouldn't have access to.

Thanks!

wilson29thid commented 9 years ago

Can you provide details on the notification received?

Tuomainen commented 9 years ago

For example I've subscribed for notifications within AP1 boards. As a member of AP1S1 and as a platoon clerk, I can see child boards for my squad and Platoon HQ. I don't see S2 or S3 boards. But since I've subscribed into the whole AP1 board to receive forum notifications, whenever S2 or S3 makes a thread in their own boards (which I cannot see), I get notified about a new topic and can read the topic's title. The content of the topic I cannot see or access.

Evensen commented 9 years ago

I have also gotten notifications like this, in my case it was about OCS (Swomma confirmed it). However I don't get any other information except the name of the thread and the person who posted in it.

Example:

Cpt. Walker started a new discussion: OCS Talks Outline May 13

Of course I don't have permission to view the post itself.

Tman: Are you not supposed to be able to view the squad forums of the squads in your platoon as platoon clerk? Might want to check this up with your HQ.

Tuomainen commented 9 years ago

SSgt. @Evensen , I don't mind.

Vlad29th commented 9 years ago

Very late comment to this, also, whenever someone replies to an existent board. Like, as far as my knowledge goes, in S3 they have a board where they inform the SL/ASL that they will be absent for that drill and the reason. Whenever someone posted there, it would show up in my notifications. Another example is whenever someone posts of discharge requests in Co. HQ board or whenever someone replies to them. Yet again, I don't see the content just that for example: 1Lt. Browning started a new discussion: Pvt. Joe - Discharge or Cpt. Cooke commented on Pvt. Joe - Discharge

wilson29thid commented 9 years ago

Can someone check if this is still occurring now that I've upgraded the forums? If so, we need to report this bug to Vanilla

Tuomainen commented 9 years ago

I asked someone from my platoon to post anything in their squad board (which I cannot see) and I received a notification about it.

wilson29thid commented 9 years ago

@Tuomainen can you post this on the vanilla forums (in Vanilla 2.1 Help)? They'll probably ask for some details, and perhaps a screenshot, and I'm a little foggy on it since I haven't experienced it. I know the first thing they'd say is to upgrade the forums, so I've just done that. We're on the latest version, 2.1.11.

Shoot me a PM if they ask a technical question that you can't answer, or they propose a solution. And paste the link to the discussion here if you don't mind.

Tuomainen commented 9 years ago

@wilson29thid it seems it has been brought up in August 2014 but no reply: http://vanillaforums.org/discussion/27598/trying-to-get-advanced-notifications-to-a-notice-sub-sub-categories-and-b-respect-view-access

Should I still try to get attention to it?