Search Bypasses Rules

  • Resolved mrgad

    (@mrgad)


    8 years, 6 months ago

    I’ve confirmed that everything is set up correctly. I log in as a user who is restricted from a) viewing a specific page, and b) from seeing this page as a menu option. If I log in, the item isn’t in the menu. And if I go directly to the URL of the restricted page, it correctly redirects me back to the home page. So far, so good.

    But now, if I go to example.com/?s=searchstring and search for a word that is found on that restricted page, I get search results that includes that restricted page.

    But FAR MORE CONFUSING: If I click on the search result, which is a link to the restricted page absolutely identical to the direct link I tried earlier and which blocked me — by following this link from the search results page I am able to access the restricted page!

Viewing 1 replies (of 1 total)
  • Plugin Author Joachim Jensen

    (@intoxstudio)

    8 years, 6 months ago

    Thank you for reporting this.

    Currently Restrict User Access does not hide items from lists, so it is expected behaviour that search results can include restricted items.

    When you click on the link to a restricted post in the search results, what happens if you refresh the page (F5)? What happens if you copy the link and paste it into another tab in the browser?

Viewing 1 replies (of 1 total)

The topic ‘Search Bypasses Rules’ is closed to new replies.