Normally Private Screens Show (/mod/<modid>/moderation, /mod/<modid>/settings/analytics)

[sylv256]

Please confirm the following.

• [x] I checked the existing issues for duplicate problems
• [x] I have tried resolving the issue using the support portal

What browsers are you seeing the problem on?

Firefox

Describe the bug

No response

Steps to reproduce

1. Add /settings/analytics or /moderation to the end of a mod URL.
2. You will not see any private information.

Expected behavior

You should not see this page. That is to say, the server should send a 403 page.

Additional context

No response

[Prospector]

Is not really an issue, there is no way to navigate to these pages naturally

[sylv256]

Yes, but most websites show a 403 Forbidden page to indicate to the user that they shouldn't be there. This is especially useful when the user is logged out but tries to load these pages.