Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Groups that are able to post announcements can also see all announcements #433

Open
elhananjair opened this issue Feb 1, 2022 · 1 comment

Comments

@elhananjair
Copy link

elhananjair commented Feb 1, 2022

Steps to reproduce

  1. Announce to a specific group let's say Group A
  2. If a user is part of the announcing group but not Group A, he/she still can see the announcement

Expected behavior

I don't know if this behavior is intentional but I was expecting that even if the user has a privilege to announce (Because the group he/she is in allowed to announce in admin settings), the announcement made to Group A (which the user is not a member of) shouldn't be seen by the user.

Actual behavior

This user can see all announcements made by a user who has permission to announce.

@EmJotGeh
Copy link

I noticed that too and it shouldn't be like that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants