| SolrConnector.keywordSearch builds its query with the collections filter (and now the language filter) but never applies buildWikiQuery, unlike the semantic path (prepareQuery). Collection names in the filter are not wiki-qualified, so a same-named collection on another wiki leaks its chunks into keyword results. The per-document canView post-filter still applies, but the collection-level group gate (hasAccess) was evaluated only against the current wiki's collection — so content behind a query-group restriction on the other wiki's collection can surface to users who wouldn't pass that collection's gate. |
