Public
Honored Contributor

Blogs v3: Blog Dashboard component showing up for anonymous users?

Hi ya'll!

We are testing out Blogs v3 on our staging site, and we've noticed that the Blog Dashboard component shows up for anonymous users, with a "View My Contributions" link. This doesn't make any sense / seems like a bug.

Does anyone else see this issue? I'll also file with support but wanted to see if it was something odd with our configuration or a more general issue.

A blog on our staging site (Blogs v3)A blog on our staging site (Blogs v3)

 

Cheers!

9 Replies 9
Honored Contributor

Support has confirmed this is a bug. Here is what they wrote in the support case:

With reference to your query about blog dashboard visible to users without permission, we have identified this issue as a bug with the Blogs V3 feature.

The issue is being reviewed by our engineering team, I will keep you updated as we hear back from our team.
Khoros Staff

@CarolineS This is fixed and will be backported to 21.2 in a few days. I will update the thread after the backport is complete. 

Honored Contributor

Bug is fixed on our staging site now, yay! (Revision: 21.2 (21.2-release r2103242028))

Honored Contributor

A similar, but not exactly the same, issue seem to be present on 21.4 and 21.5 - seems like maybe the issue only got fixed for the case of an anonymous user. A normal user with no particular blog permissions is seeing the Blog Dashboard w/ "View My Contributions" link

image.png

Sigh. I'll file this with support.

 

Khoros Staff

@CarolineS Even if a member does not have Author permissions, when added as a co-author for an article, the member will have the authoring permissions for that article. All articles where a member is added as a co-author are shown when clicked on 'view my contributions'. So, it appears for all signed-in users. 

Honored Contributor

But this member wasn’t added as an author. I don’t understand the logic that just because a user COULD be added as an author, the blog dashboard shows up. Seems that more sensible logic would be to show the blog dashboard for users who actually have authoring abilities. 

Khoros Staff

@CarolineS Let us look into this if we can disable the component when the member is not added as a co-author at all. 

Honored Contributor

Hi @SohilM - FYI this is still an issue, I just tested it on 21.7. The blog dashboard and "View my contributions" link show up for any logged in user, even if they are not a co-author on anything and if they don't have permission to post a new article. 

Khoros Staff

Yes @CarolineS, this is not fixed yet. Will update you after this is resolved.  

Welcome to the Technology board!

Curious about our platform? Looking to connect on social technology? You've come to the right place!

Are you a Khoros customer? For direct assistance from our Support team, please visit the Support Forum.