Private group is not really private after all

vincebodie

We have a created a private group called "Board of Directors" on our site:
https://pacificbeachsurfclub.com/community
However, group discussions are showing in the stream on the home page:

Also, if a link to the discussion is shared, it is viewable even when not logged in.
https://pacificbeachsurfclub.com/community/groups/viewdiscussion/1-emergency-board-cast-system-this-is-only-a-test?groupid=2
One last thing, how do I add "Hello Me" module to the above page so that people who are members of the group can login right on the above page?
Thanks!

Ninja

vincebodie
Hi
The frontpage show all the activity of site for the user points, if you want to hide the discussion, you need to unpublish the user points for : New Group Discussion

For JS HELLO ME module you can publish it on any module position that is present on the template you are using.

Regards

vincebodie

Ninja
Thank you for that suggestion. That will work, but it will hide discussions for all groups, public and private. We really should have more options for the settings of private groups vs public. Any ideas about this?
Vince

vincebodie

Ninja
Another issue... your suggestion hides group discussions from the stream when you are logged in, but when not logged in the discussions still show. So this is not a workable solution.

Ninja

vincebodie
Hi
Kindly reset the privacy of group list to friends only http://prntscr.com/kybqid
Now add a discussion and check it with a different user account.
Example : User A added a dicussion.
User B who is not friend of user A and not part of group should not see the discussion.

At this time everything is public on your site.

Regards

vincebodie

Ninja
Thank you, but that will only affect the display of any list of groups that members are a part of. And it has no effect when there is no user logged in.
These settings should really be available on a per group basis, along with the ability to choose the group's privacy settings for discussions, stream activity, etc.

Ninja

vincebodie
Hi
Current ACL is not based on the each group. Jomsocial has the Joomla user group ACL that work on all groups. And private groups are not visible to all members.

On your site if that activity are set to public for the frontpage. This is reason its showing when user is not logged in.
I will make a test on fresh package on it check if there is some bug for private group discussion as well for the user those are not part of group.
Regards

vincebodie

Ninja On your site if that activity are set to public for the frontpage. This is reason its showing when user is not logged in.
If you mean disabling "New Group Discussion" and "Reply Group's Discussion" in "Configuration > User Points", I did that, but private discussions still show on the frontpage when a user is not logged in.
If there is some other setting I am missing, please tell me.
Thanks

vincebodie

What about this...
1. JS creates a menu item for each group discussion like this:
community/groups/viewdiscussion/discussion-name
2. We have a Joomla user group named "Board Members":

3. Now we just need to set the ACL for community/groups/viewdiscussion to be viewable only by the Board Members group, yeah?
But how?

Ninja

vincebodie
Hi
I will share the suggestion to concern team, its not a simple implementation, it needs planning to check the possible ways.
The Joomla ACL only work for group.

To hide he frontpage activity for public, open Configuration > layout > http://prntscr.com/kyrpf0
Set it to Members only.
To show the activity only for friends change it to me and friends : http://prntscr.com/kyrpg9

For ACL you site does not have guest user group that is used in Joomla by default. It seems its deleted and ACL is customized, i am not able to replicate this issue in fresh package, can you check it on demo site here

Regards

vincebodie

Ninja
That is not a good solution because it hides all stream activity from guests, and we would like people to see some activity and join the site.

Hopefully my solution will be possible. I will have a look at the demo site and the missing guest user group.

Ninja

vincebodie
Hi
Please read my last post again, the issue seems only on your site, Kindly update the Jomsoical to latest version and allow me to disable all 3rd party extension on site to check this issue.

Regards

vincebodie

Ninja
OK, update done, please proceed.

vincebodie

Ninja
It seems that the issue is fixed. There was one old discussion in the activity stream that I had to hide manually via "Monitor > Activities".

Ninja

vincebodie
Hi
Kindly check it now, i added guest user group and disable ACL manager, i do not see the discussion as public user now.

Regards

vincebodie

But wait... the discussion is still visible when not logged in...

Ninja

vincebodie
Hi
Kindly check it for new group and discussion as these groups were created with wrong ACL and no guest group.
For your test i created a test group and discussion.
https://pacificbeachsurfclub.com/community/groups/viewdiscussion/4-test?groupid=6
you can not view it : http://prntscr.com/kz7zix

Regards

vincebodie

OK, this issue seems to be resolved, thanks. Apparently I used a quickstart installation from the site's template makers that included no guest group.

Ninja

vincebodie
Hi
You can compare it with Joomla installation and see there is guest group to run Joomla properly with ACL.

Regards