Blogs v3: Blog Dashboard component showing up for anonymous users?

[CarolineS]

Hi ya'll!

We are testing out Blogs v3 on our staging site, and we've noticed that the Blog Dashboard component shows up for anonymous users, with a "View My Contributions" link. This doesn't make any sense / seems like a bug.

Does anyone else see this issue? I'll also file with support but wanted to see if it was something odd with our configuration or a more general issue.

A blog on our staging site (Blogs v3)

Cheers!

[CarolineS]

Support has confirmed this is a bug. Here is what they wrote in the support case:

With reference to your query about blog dashboard visible to users without permission, we have identified this issue as a bug with the Blogs V3 feature.

The issue is being reviewed by our engineering team, I will keep you updated as we hear back from our team.

[SohilM]

@CarolineS This is fixed and will be backported to 21.2 in a few days. I will update the thread after the backport is complete. 

[CarolineS · Accepted solution]

Bug is fixed on our staging site now, yay! (Revision: 21.2 (21.2-release r2103242028))

[CarolineS]

A similar, but not exactly the same, issue seem to be present on 21.4 and 21.5 - seems like maybe the issue only got fixed for the case of an anonymous user. A normal user with no particular blog permissions is seeing the Blog Dashboard w/ "View My Contributions" link

Sigh. I'll file this with support.

[SohilM]

@CarolineS Even if a member does not have Author permissions, when added as a co-author for an article, the member will have the authoring permissions for that article. All articles where a member is added as a co-author are shown when clicked on 'view my contributions'. So, it appears for all signed-in users. 

[CarolineS]

But this member wasn’t added as an author. I don’t understand the logic that just because a user COULD be added as an author, the blog dashboard shows up. Seems that more sensible logic would be to show the blog dashboard for users who actually have authoring abilities. 

[SohilM]

@CarolineS Let us look into this if we can disable the component when the member is not added as a co-author at all. 

[CarolineS]

Hi @SohilM - FYI this is still an issue, I just tested it on 21.7. The blog dashboard and "View my contributions" link show up for any logged in user, even if they are not a co-author on anything and if they don't have permission to post a new article. 

[SohilM]

Yes @CarolineS, this is not fixed yet. Will update you after this is resolved.  

[RahulHa]

Hi @CarolineS This is now fixed and will be part of the upcoming Communities release in Dec (21.12)

cc @SohilM 

[CarolineS]

That’s great news, thank you @RahulHa!

[EmDunn]

@RahulHa  While this is not appearing for non-logged in users, we are still seeing this component appear for all logged in users. We're on 21.10 (21.10-release r2112141645) - can you tell me when Dec (21.12) is going to be released?

Thanks!

[RahulHa]

@EmDunn 21.12 has now been released. Release notes: https://community.khoros.com/t5/Release-Notes-and-Info/Khoros-Communities-21-12-Release/ba-p/666246

cc: @SumantMa 

[CarolineS]

Great news, and thank you for the update here!!