diff options
author | ubq323 <ubq323@ubq323.website> | 2022-02-25 19:19:58 +0000 |
---|---|---|
committer | ubq323 <ubq323@ubq323.website> | 2022-02-25 19:19:58 +0000 |
commit | 60244846f4318e47747fc9f6ed342a765919dc20 (patch) | |
tree | a24089627444d5caba49a3544b75cb5ba03f70b0 /.fossil-settings | |
parent | 44f08e3a7b01298150b149893703189e5930ad99 (diff) |
make posts in "private" subforums not visible through search or user pages
subforums are considered "private" if the p_view_forum permission
is denied to the 'other' role in that forum. this doesn't consider
inheritance: if a forum doesn't have an 'other' role then it is
considered "public" (!!!). since inheritance is probably going
to be removed soon anyway, and since we currently only have
one "private" subforum, i think this is acceptable.
also note that posts in "private" subforums are hidden in
user pages and in search results to everyone, even people
who do have access to the subforum in question. again, since
the permissions logic is probably going to be changed, i don't
think it's worth implementing actual permission checks here with
the current (confusing, somewhat broken) permissions system.
Diffstat (limited to '.fossil-settings')
0 files changed, 0 insertions, 0 deletions