BuddyPress.org

If the group is private so is also the forum that belongs to it.

Tried it,
I click on “Private message” and arrive on my profile.
Only have to fill in the subject and the text. The recipient is already filled in.

e.g.
Verzend naar (gebruikersnaam of naam van een vriend)

ProfielfotoStephanie123

Dit is een aankondiging voor alle gebruikers.
Onderwerp [subject field]
Bericht [message field]
[send button]

So in your case it is not normal behaviour.

Sounds like something is messing with the default behaviour then. Personal activity updates would never appear in any group unless it was “post in group”, vs “post in profile”

Do you have a filter or plugin already set to do private sitewide activity stream?

“Activity Stream for friends only” & “Currently, I have the privacy option the restrict each post to Public, Friends and Only me. But the Group code you gave me only works if I set the privacy to public.”

@naomibuch I think I see what you are saying.

Private group activities are appearing in the sitewide feed? Is that right?

All 3 of these options (BP Simple Private, Buddypress Lock, or the custom code) all cause significant page speed issues. (like 3 seconds)

Any suggestions to combat the privacy issue without compromising speed?

Hi @meganelford,

basically, your developer is requesting information so that the app can authenticate with the BuddyPress site. Due to the fact users are authenticated, the app needs permission to authenticate using those keys you mentioned.

To make that happen you would need to have a token or oAuth plugin setup on your buddypress site. After that, create those API keys and provide to her.

Here are a few plugins you could try:

JWT Authentication for WP REST API

WordPress REST API Authentication

Application Passwords

https://github.com/WP-API/jwt-auth

Just be aware that whatever choice you make, there will be a learning curve.

Also, I’d recommend checking how the API will affect the intranet nature of your site. For example, if you intranet is private (the front-end of the site), current BuddyPress API is open. Meaning, some information is open to the public (not logged in information, of course).

Just something to keep in mind. Hope this answer your question, or at least, provides you with next steps (install the plugin and pass the keys information to her).

🙂

Thats weird. You should see on the left side a Log In and Register link and a search icon on the right.

And you are not using any other plugin or code snippet to modify the admin bar in some way or making your site private? You have the General setting of Anyone can register ticked?

what is your theme and what plugins do you have installed? when you say friends, is your site meant to be private? I don’t think there is a setting that would cause this. I’d think it would be a plugin or a customization made in the theme.

did you try https://buddypress.org/support/topic/making-users-profiles-forums-and-activity-private/

That’s an interesting idea. What about using the Akismet anti-spam service to check the content of the message?

I’ve also had bots send spam messages via private messaging, and it’s a pain once it gets started.