[ABD] Topics only visible to original poster

[Kailey]

Extension Name: Topics only visible to original poster
Author: kinerity

Extension Description: An extension for phpBB 3.1.x that allows topics to be visible only to the OP and users with the correct permission.
Extension Version: Beta

Requirements: You must have this pull request merged into you phpBB installation for this extension to work. It is slated to be included in 3.1.3.

Extension Download: http://www.acsyste.com/op_only_topics.zip

I commented out the code I plan to use for the search if I can ever get the event I need included in the code. If you're feeling adventurous, you can add the event yourself and remove the relevant comments from the listener file. See this topic.

[brunoais]

Are you doing the same as I am?
Interesting...
I'll take a look at it later.

[Jessica]

Thank you for creating this. This is a much needed feature. Too bad there can't be a properly supported MOD version though....

[proskier]

It is slated to be included in 3.1.3.

When is that 3.1.3 release happening? Any idea?

Thank you for creating this. This is a much needed feature. Too bad there can't be a properly supported MOD version though....

What does this mean? I thought MODs are no longer? Extensions replace them now, no?

[Jessica]

Thank you for creating this. This is a much needed feature. Too bad there can't be a properly supported MOD version though....

What does this mean? I thought MODs are no longer? Extensions replace them now, no?

No, that's not true as 3.0.x is still supported. My main board uses 3.0.12 as I had decided long ago that I won't bother upgrading to 3.1.x - I have too many MODs (not to mention too many of the MODs I like still have yet to become extensions). I just wished there was a MOD version of this extension, one that's supported (as the current one doesn't seem to be supported)

[proskier]

If it makes you feel better I used the 3.0.12 mod version on my board before updating and it worked great. Supported or not.

[Mess]

Nice, ill be trying this.

[yasser33311]

thanks

[brunoais]

I c... While yours is a permission and a forum-wide option. In my version, it is only a permission. I guess that, if the permission is not on for the forum, all the rest is ignored for that forum.

Security faults:
Careful mate! You are still too incomplete!

• You don't secure the MCP.
• You don't secure the UCP.
• You don't prevent e-mail notifications.
• You don't prevent internal notifications (when mentioned, for example).
• You don't prevent bookmarking
• You don't prevent post quoting
• You don't prevent post PM quoting
• You don't prevent post reporting
• You don't filter log viewing

You also have other incomplete actions:

• viewtopic: The user can guess the topic exists because, in some configurations, the notifications login box appears when the user tries to access.

[Kailey]

• You don't secure the MCP.
• You don't secure the UCP.
• You don't prevent e-mail notifications.
• You don't prevent internal notifications (when mentioned, for example).
• You don't prevent bookmarking
• You don't prevent post quoting
• You don't prevent post PM quoting
• You don't prevent post reporting
• You don't filter log viewing

Can you elaborate on the UCP and other points? I can see the issue with the MCP (any moderator regardless of permissions will see it).

• viewtopic: The user can guess the topic exists because, in some configurations, the notifications login box appears when the user tries to access.

How did you test this? If I try to access a topic as a guests, I get a "You are not authorised to access this area". I can't prevent people from guessing topic_ids.

[Kailey]

There was a small problem with the zip file I sent out (it had other extensions I'm working on ). Please either remove them or download the new zip.

[Kailey]

brunoais has advised me that he is working on the same extension. I don't see the point in having 2 extensions that functionally do the same thing, so I'll abandon this one.