Title: security issue?
Last modified: February 4, 2019

---

# security issue?

 *  [capsulebb](https://wordpress.org/support/users/capsulebb/)
 * (@capsulebb)
 * [7 years, 4 months ago](https://wordpress.org/support/topic/security-issue-97/)
 * I have set the Bookmark profiletab to be private, where only the owner can view.
   The tab doesn’t show on the profile menu as it should be. However, I am able 
   to override this by typing in the follow link of another userID (sample below).
 * [http://www.domain.com/user/userID/?profiletab=bookmark](http://www.domain.com/user/userID/?profiletab=bookmark)
 * Is this a bug or I have just set something wrong?

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Author [SuitePlugins](https://wordpress.org/support/users/suiteplugins/)
 * (@suiteplugins)
 * [7 years, 4 months ago](https://wordpress.org/support/topic/security-issue-97/#post-11166584)
 * Thanks for mentioning this. I am going to investigate this to see what is causing
   the issue.
 *  Thread Starter [capsulebb](https://wordpress.org/support/users/capsulebb/)
 * (@capsulebb)
 * [7 years, 4 months ago](https://wordpress.org/support/topic/security-issue-97/#post-11167585)
 * follow-up investigation…
 * The problem seems also apply to other UM built-in tabs, e.g. I have a “private”
   comments tabs which has the same issue.
 * However it is only limited to roles who are set “public” under UM –> User Roles–
   > Profile Access –> Can view these user roles only.
 * * Side question, may I know when “Roles that can view this tab” apply? If I have
   set a tab to private (Only owners of the profile can view tab. ), the selection“
   Roles that can view this tab” can be ignored?
 *  Plugin Author [SuitePlugins](https://wordpress.org/support/users/suiteplugins/)
 * (@suiteplugins)
 * [7 years, 4 months ago](https://wordpress.org/support/topic/security-issue-97/#post-11167592)
 * For your side question, the answer is Yes. The roles can view this tab should
   be ignored when set to private.
 *  Thread Starter [capsulebb](https://wordpress.org/support/users/capsulebb/)
 * (@capsulebb)
 * [7 years, 4 months ago](https://wordpress.org/support/topic/security-issue-97/#post-11167697)
 * Ok thanks!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘security issue?’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/um-custom-tab-builder-lite.svg)
 * [Ultimate Member Custom Tab Builder Lite](https://wordpress.org/plugins/um-custom-tab-builder-lite/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/um-custom-tab-builder-lite/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/um-custom-tab-builder-lite/)
 * [Active Topics](https://wordpress.org/support/plugin/um-custom-tab-builder-lite/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/um-custom-tab-builder-lite/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/um-custom-tab-builder-lite/reviews/)

 * 4 replies
 * 2 participants
 * Last reply from: [capsulebb](https://wordpress.org/support/users/capsulebb/)
 * Last activity: [7 years, 4 months ago](https://wordpress.org/support/topic/security-issue-97/#post-11167697)
 * Status: not resolved