Pinned Post Reply - Permissions

Dazed
Dazed
@dazed
12 years ago
1,022 posts
I have seen this a few times...

How to repro:
use pj dark
as an admin I created a post with image, private and pinned
click submit
as a user I went to reply and I could see the post even though I was an artist not an admin
after clicking submit I received a white page with the below:

url: http://dazed.jamroomnetwork.com/forum/post_create_save
Message: {"success":"successfully posted","id":4}
updated by @dazed: 12/14/13 01:28:03AM
Dazed
Dazed
@dazed
12 years ago
1,022 posts
duplicated again with the above steps

{"success":"successfully posted","id":7}
brian
@brian
12 years ago
10,148 posts
Can you reproduce it on Elastic?

Thanks!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
Dazed
Dazed
@dazed
12 years ago
1,022 posts
yes and no.

yes in that as a user I was able to reply to a pinned / private admin post (per the help that should only be visible to admin)

no in that it posted fine with no white page/message
brian
@brian
12 years ago
10,148 posts
okay - I haven't tested the private post much - I'll do a full run through on that tomorrow.

Thanks!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
brian
@brian
12 years ago
10,148 posts
Simple update for this - I've removed the "Private" option from the forum. It was really not even working, and to get it working was going to require significant SQL queries, so I decided to drop it. The reason for it being there was to let the forum double as a support ticket setup, but I've decided and actual Support Center module that has a ticket system is going to be better.

My initial worry was that someone who wanted to open a support ticket would enter their system credentials and yet forget to make the post private.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
Dazed
Dazed
@dazed
12 years ago
1,022 posts
Good call Brian. Paul did a ticket module in JR4 that was superb. Maybe twist his arm a bit? :)
brian
@brian
12 years ago
10,148 posts
Dazed:
Good call Brian. Paul did a ticket module in JR4 that was superb. Maybe twist his arm a bit? :)

Yep - we'll get something together :)


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
brian
@brian
12 years ago
10,148 posts
I've also update the forum so image attachments will now show in a lightbox instead of prompting you for a download - let me know if you see any issues.

Thanks!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net