BuddyPress.org

if on latest bp/wp – then https://wordpress.org/extend/plugins/buddypress-restrict-messages/ long as the users sending has the wp_cap of ‘administrator’

Have you figured this one out? I would like to do the same

Can you switch to bp-default to see if the problem persists?

This is even WORSE…

-Hidden/private group activity DOES show for logged-out users
-Hidden/private group activity DOES show on the Friends activity tab

I’m using Themekraft CCPro as well as S2member.
Also using BP Forums Extras: View activity comments on forum posts
Activity Bump.

I’ve made no modifications to activity-loop.php.

For the moment, I can restrict activity for not logged in users by using s2member’s uri restrictions, but this is just a patch, there’s something funny going on here.

Daisy

PS as an aside, I can’t access any forum topics I’ve started or replied to through my profile page *on this site*. Also can’t post activity updates or private messages to anybody. Can’t access forum replies via the menu at the very top of the page either.

I can’t reproduce either issue on my local installations.
– Hidden/private group activity does not show for logged-out users
– Hidden/private group activity does not show on the Friends activity tab

Are either of you running plugins that affect the way that activity works? Or is there something in your custom theme that modifies the activity loop?

I am having this issue – Private Groups are showing up to logged in users, under the ‘my friends’ tab in the activity stream, even though they themselves are not a member of the group that is private!! I am using BP for a paid membership site, please help, this is a hole in the privacy….

I removed the ‘all members’ activity stream option/tab from my theme, so I don’t have to worry about that, but still…private group activity shouldn’t show up there?!

BTW I tried to PM Boone Gorges about this and I can’t post any updates here at buddypress.org for some reason…

I am using BP 1.5.1 and am having this exact issue – is it still an issue or am I missing something? Private groups still populate the ‘my friends’ activity feed. Nonmembers can see the activity of their ‘friends’ in private groups in the activity feed. I’ve disabled the ‘all members’ tab in the activity feed because of this issue, so I can’t currently comment on whether private groups are showing up in the ‘all members’ filter.

THANKS! I’m running a paid membership site so this is a biggie

I am troubleshooting this issue at the moment. In my theme, I’ve removed the “all members” activity tab, to limit this issue. But if somebody is friends with somebody else who is a member of a group they are NOT a member of, they get to see that person’s activity even though they’re not in the group. Any tips other than removing the “my friends” tab, which I really don’t want to do?

Create one group that is hidden (maybe call it “Private Meetings”), this group will not show up on the site. Then invite those you want to have private discussions with. You can add and remove members for different discussions.

I don’t know an easy way to do this at the moment, but it’s a reasonable enhancement request. At the very least, we could provide a filter that would allow plugins to modify which group types are permitted. http://trac.buddypress.org

Not to sound crass but isn’t that what private messages is for?

Log into the BuddyPress demo site http://testbp.org/ and send a private message with a username and password to your site
http://testbp.org/members/mercime/

i’m trying to do this, too! great idea! if anyone comes up with any solutions, that’d be killer

Either a bug with the code or a bug with the description.

if you want to modify that behavior you can edit the theme files which i did for my community. users browsing the page don’t see anything unless they register. i used the wordpress-function is_user_logged_in()
files to consider:
/wp-content/plugins/buddypress/bp-themes/bp-default/activity/activity-loop.php
and to hide the rss-button (private groups still in rss if you know the link or browse the source code – but users not logged using the site don’t see anything):
/wp-content/plugins/buddypress/bp-themes/bp-default/activity/index.php

Private is basically read- and invite- only. https://codex.buddypress.org/getting-started/group-settings-and-roles/

standard feature in other community software solutions – sometimes you have to manage members/trolls/issues via which the site admins needs to verify the context.

@etivite Then you better throw away your privacy agreement first.

it would make a good wp-admin plugin to view all member PMs. if someone has done that – is different question

Everythings possible, you could always see the data in the database..