• User can subscribe to unauthorized categories

    By Brian W Wiggins 2 decades ago

    If you restrict category visibility to certain users or groups it works as designed. However any default user can edit their profile and if the newsletter option is enabled all categories will display whether or not they have access and they can subscribe to them. This means the user can receive notices for categories they don't have access to because the newsletter agent just looks at the categories in the user profile and not if they have access.

    • sorry duplicate post

      By Brian W Wiggins 2 decades ago

      didn't see someone posted same thing earlier.