Bug "Can View Category" problem

[Ocean44]

I'm trying to set some reviews to 'TEST Category' for example so that only the Admin can see them.
Here is what I did:

Set some reviews to the category 'TEST'
In Category Management, edit the category 'TEST' and select only Administrators for "Can View Category" for that category.
Then I log out.
As a 'Unregistered / Not Logged In' user, I can still see the reviews set to be in the TEST category.
I have refreshed the pages.

 

[Dylan]

Thanks for catching that. I will release a fixed version of this soon. If you want to manually fix it for now

Open dbtech/review/includes/class_core.php

At about line 2685 find

            $subcategories[] = array('catid' => $category['catid']);

            $subcategories = self::fetch_category_subs($category['catid'], $subcategories);

replace with

            $catperms = unserialize(self::$vbulletin->dbtech_review_categories[$category['catid']]['permissions']);

            if(is_member_of(self::$vbulletin->userinfo, $catperms))
            {
                $subcategories[] = array('catid' => $category['catid']);
                $subcategories = self::fetch_category_subs($category['catid'], $subcategories);
            }

That will hide the display of reviews in hidden categories.

 

[Ocean44]

That works for the main display of reviews, but the reviews in my 'TEST' category still appear for all usergroups in the boxes for "Latest Reviews", "Most Commented Reviews", etc.

Thanks

 

[Dylan]

I think I finally have it worked out. I released a new version today that should take care of the side blocks as well as search results.