I'm not sure if this is possible in the current configuration:
My issue is this:
A (anonymous) user can see tags used only in 'private' pages, e.g.
pages the current user has no view acces to.
If he clicks a tag, he can see the page
"Tags?do=viewTag&tag=DeadlyIncidents" showing him no pages with this
tag.
The problem is threefold:
- The tagcloud is cluttered with tags that are of no use to the current user
- The user can become confused if he tries to look for a page with that tag
- Information existing in a page is leaked. A tag is just a tag, but
it can tells something about information on one or more pages.
In my opinion, the user should only be able to see tags that are used
in pages he has view right to.
I can imagine it would put a heavy load on a system to check for every
tag if it's used in viewable pages, though.
Any thoughts?
Sincerily, Joris
Show replies by date