Non-logged in user can view any post in any forum!!!

I was just told about this as well from people in 2old4forza.  It looks like it may have happened during a rebuild.  I'm going to have to go through and do another build tonight.  From there we will have to reconfirm the problem is gone.  I'm going to rebuild 2old2playHalo now just to see if my suspicions are correct however. Check in the next 15min and let me know if the issue remains.

Can you do a test again with the fix i just put into place?  Thanks

2o2pHalo doesn't even show up anymore under the tab, my groups.

I click on my 2o2pHalo browser bookmark tab which takes me directly to my clan page...nothing. It says I can't post in this topic and that's it.

How about now Enemy?

It's back! =D

Ok but let me know if you can post.  Also, I need to see if people can still get in while logged out.  I'm using 2o2phalo as teh test bed so I dont have to do it over and over when I apply the patch to the rest of the forums.

Ok, I can't post in my clan forum.

Logged in or logged out, it doesn't matter, I can get acces to every private forum (thread to be more accurate) on the site, I tried a few, via the member/trackrecord backdoor.

I don't think I can see our private group posts while logged out now, but I can see any and all when logged in via the tracking.

In our clan forum: "You are not allowed to post new content in this forum."  is in the upper left corner.

Trying something new.  

For 1 I'm getting rid of tracking.  I"m not sure I every really liked the idea of it in the first place.  It probably makes more sense for members that are in the same group, but universal is dumb.  

Secondly, I'm getting rid of any and all instances of anonymous user access to group forums.  I'll be starting with 2o2phalo first, but once I confirm it works I'll go site wide with a massive update tonight.

This should mean people have no way to view other posts or track users.  I may bring back the tracker in the future although in a very limited form. 

P.S. You should all be able to post again in the 2o2phalo forum.

Yup I can post.

And I don't see the tracking tab anymore.

Good stuff, now I just need to apply these settings to every group forum tonight and we should be all set. 

Thanks for all the help guys.

thanks doodi

uh, I like tracking so I can keep track of the threads I've posted in across the site and see which have new posts.  How else can I do this?

Any posts you have you can sub to and receive either a PM or Email for.  I'm sure tracking will come back in some form, I just don't like how intrusive it is in its currently state.

I don't want a notification, I just want to have a list of my subscribed threads.  Are you saying that's no longer available?

I'm saying it's no longer available.  However you could sub to the posts and just not have a notification sent out.  This would give you the same basic functionality.  Sorry, but tracking was a security risk, and until I can build some better code around it, I wont have it live.

ah so there is a page with all my subs on it?  That's all I want.  I'd rather keep the site the site, and just be able to drop by and pull up all the threads I'm involved in and check the ones with new posts showing.  All I see in options when subbing is "Private Message" or "Mail" - there's no "no notification" option.

I'm not sure I understand the "security" risk from the explanation given, but I'll just assume you know better than I do on the matter.  Seems more like maybe an annoyance if you care if others see what you post - but I swore you were for open clans in the beginning anyway.  I've been using "track" from day one v3, no issues except being slow to search for them sometimes.

if I can't use track or a page of subs, my use of the site it going to really drop.  Being a busy person as I'm sure most of us are, being able to drop by and check my list of threads quickly for updates was the best.  Sucks.

The search on v3 seems to be lacking still - I can't seem to find a form to fill to do an ego search and pull up threads I've posted in.  So really there's no way to just get a list.  Any other message board I post on has that feature, so I never thought of it as an issue.

You're 100% correct I would much rather have all clans be open (not to posting but at least to viewing by registered user only) as I think it stops a lot of behind the back smack talk and allows gamers to actually learn about a group and what they play.  However I'm not sure the rest of the site would agree given this vary thread.  It may take the lack of groups on 2o2p to make this possible as closed groups tend to pushout new life and new members.  I will say, any new groups formed here wont get the benefit of being private.  Ultimately it comes down the inability to grow the community.   Apart from a select list of really great groups we see the same pattern:

• Start Private Group
• Form own Community
• Leave Community to recreate 2o2p
•  

This isn't a sustainable model and we know that now. However, in the meantime I need to respect the privacy of group forums and currently with tracking that was not happening.  It also felt a bit creepy how far people could track.  Again, I like the functionality and I'm fairly certain you can mimic it with subscriptions.  There is currently no setting for site only, but that is not something that will take me little time whip up if you don't like notifications. I can also rebuild the functionality to be used on a per-user basis. This would allow you to track your own items but outsides wouldnt be able to see.  

So fear not, there will be a way to track content on 2o2p. Just not at the sake of privacy concerns.   

thanks Doodi 

 DAMN!

 Had I known about this I would have been spying on those Halo guys.

 I dont trust any of them!

 shifty bastards