Subj : Re: What does "Msg Kinds" specify?
To   : Andrew Leary
From : Niels Haedecke
Date : Mon Jun 01 2020 06:10 pm

Hi Andrew,
thank you for fixing this issue (and the one regarding the user handle in
From/To fields) so quick! I've already updated my Wintermute BBS to 1.0.7.17

Working perfect so far!

Kind regards,
Niels

Andrew Leary wrote to Niels Haedecke:
AL> Hello Niels!
AL> 
AL> 25 May 20 13:44, you wrote to Vincent Coen:
AL> 
AL>  NH> So as you can see, the user I'm logged in (test) can see that there
AL>  NH> are private messages between amiganer and lodger. He can even see the
AL>  NH> subject of any private message. This should not be possible. When
AL>  NH> querying the local, private echo, user "test" should not see any
AL>  NH> messages listed he is neither sender nor recipient of.
AL> 
AL>  NH> However, when user "test" is then trying to read one of the two
AL>  NH> messages he was shown, he gets:
AL> 
AL>  NH> "This is a private message; only the owner and addressee can view 
AL> it."
AL> 
AL>  NH> So is this the expected behaviour and could this be fixed so you 
AL> can't
AL>  NH> "spy" on other conversation topics and participants by running the
AL>  NH> Quickscan command.
AL> 
AL> This bug has been fixed in v1.0.7.16, which was just committed to the 
AL> SourceForge Mercurial and Git repositories.
AL> 
AL> Thanks for letting me know about the issue.
AL> 
AL> Andrew
AL> 
AL> --- GoldED+/LNX 1.1.5-b20180707
AL>  * Origin: Phoenix BBS * phoenix.bnbbbs.net (1:320/219)
AL> 


    Greetings, Niels Haedecke

--- MBSE BBS v1.0.7.17 (GNU/Linux-x86_64)
 * Origin: Wintermute BBS - Duesseldorf, Germany (2:240/8002)

.