Question BUG! - Registered users can post in blocked topic

Hi.

Database collation check: ✔ The collation of your table fields are correct

Joomla! SEF: Enabled | Joomla! SEF rewrite: Enabled | FTP layer: Disabled |

This message contains confidential information

htaccess: Exists | PHP environment: Max execution time: 30 seconds | Max execution memory: 256M | Max file upload: 128M

Kunena menu details:

Warning: Spoiler!

ID	Name	Menutype	Link	Path	In trash
1935	Forum	mainmenu	Itemid=2231	kunena-2018-09-17	No
2231	Forum	kunenamenu	view=home&defaultmenu=2231	forum	No
2232	Kategorie	kunenamenu	view=category&layout=list&catid=0	forum/kategorie	No
2233	Ostatnie tematy	kunenamenu	view=topics&mode=replies	forum/ostatnie	No
2243	Najnowsze posty	kunenamenu	view=topics&layout=posts&mode=recent	forum/najnowsze-posty	No
2234	Nieprzeczytane	kunenamenu	view=topics&layout=unread	forum/nieprzeczytane	No
2235	Nowy temat	kunenamenu	view=topic&layout=create	forum/nowy-temat	No
2236	Bez odpowiedzi	kunenamenu	view=topics&mode=noreplies	forum/bez-odpowiedzi	No
2237	Moje tematy	kunenamenu	view=topics&layout=user&mode=default	forum/moje-najnowsze	No
2238	Profil	kunenamenu	view=user	forum/profil	No
2239	Pomoc	kunenamenu	view=misc	forum/pomoc	No
2240	Szukaj	kunenamenu	view=search	forum/szukaj	No

Joomla default template details : shaper_helixultimate | author: JoomShaper.com | version: 1.0.5 | creationdate: Feb 2018

Kunena default template details : Crypsis | author: Kunena Team | version: 5.1.12.1 | creationdate: 2019-04-22

Kunena template params:

Warning: Spoiler!

DefaultCategoryicon	glyphicon glyphicon-folder-open glyphicon-big
profileIconset	default
DefaultIconset	default
editorIconset	default
bootstrap	1
icomoon	0
tooltips	0
borderless	1
SubjectLengthMessage	180
fullactions	0
quick	1
displayMenu	1
displayDropdownMenu	0
displayDropdownContent	1
displayModule	1
displayBreadcrumb	1
displayAnnouncement	0
displayFooter	0
avatarPosition	left
avatarType	img-circle
labels	0
whoisonlineName	default
formRecover	0
topicicontype	fa
fontawesome	1
socialshare	0
socialsharetag
socialtheme	classic
optional_username	0
writeaccess	0
localstorage	0
IconColor	inherit
IconColorNew	#48a348
editor	1
video	1
maps	0
emoticons	1
twitter	0
ebay	0
link	1
picture	1
hide	0
spoiler	0
table	0
code	0
quote	0
divider	0
instagram	0
soundcloud	0
confidential	0
hr	0
listitem	0
supscript	0
subscript	0
numericlist	0
bulletedlist	0
alignright	1
alignleft	1
center	1
underline	1
italic	1
bold	1
strikethrough	1
colors	1
size	1
wysibb	bold,italic,underline,strike,justifyleft,justifycenter,justifyright,img,video,link,fontcolor,fontsize,fontfamily,removeFormat
avatarSizeX	40
avatarSizeY	90
avatarSizeXThumb	36
avatarSizeYThumb	36
avatarSizeXWelcome	72
avatarSizeYWelcome	72
avatarSizeXList	36
avatarSizeYList	36
avatarSizeXPost	144
avatarSizeYPost	144
avatarSizeXProfile	200
avatarSizeYProfile	200
templatebyText
templatebyName
templatebyLink

Kunena version detailed: Kunena 5.1.12.1 | 2019-04-22 [ Kerberos ]
| Kunena detailed configuration:

Warning: Spoiler!

Kunena config settings:
board_offline	0
enablerss	0
threads_per_page	10
messages_per_page	10
messages_per_page_search	10
showhistory	1
historylimit	6
shownew	1
disemoticons	1
template	crypsis
showannouncement	0
avataroncat	1
catimagepath	category_images
showchildcaticon	0
rtewidth	450
rteheight	300
enableforumjump	0
reportmsg	1
username	1
askemail	0
showemail	0
showuserstats	0
showkarma	0
useredit	0
useredittime	360
useredittimegrace	600
editmarkup	0
allowsubscriptions	1
subscriptionschecked	1
allowfavorites	0
maxsubject	80
maxsig	300
regonly	0
pubwrite	1
floodprotection	60
mailmod	1
mailadmin	1
captcha	1
mailfull	1
allowavatarupload	1
allowavatargallery	0
avatarquality	95
avatarsize	2000
imageheight	2900
imagewidth	2900
imagesize	2550
filetypes	txt,rtf,pdf,zip,tar.gz,tgz,tar.bz2
filesize	520
showranking	0
rankimages	0
userlist_rows	30
userlist_online	0
userlist_avatar	1
userlist_posts	0
userlist_karma	1
userlist_email	0
userlist_joindate	0
userlist_lastvisitdate	0
userlist_userhits	0
latestcategory	0
showstats	0
showwhoisonline	0
showgenstats	0
showpopuserstats	1
popusercount	5
showpopsubjectstats	1
popsubjectcount	5
showspoilertag	0
showvideotag	1
showebaytag	0
trimlongurls	1
trimlongurlsfront	60
trimlongurlsback	40
autoembedyoutube	1
autoembedebay	0
ebaylanguagecode	en-us
sessiontimeout	1800
highlightcode	1
rss_type	topic
rss_timelimit	year
rss_limit	100
rss_included_categories
rss_excluded_categories
rss_specification	rss2.0
rss_allow_html	1
rss_author_format	name
rss_author_in_title	1
rss_word_count	50
rss_old_titles	1
rss_cache	900
defaultpage	recent
default_sort	asc
sef	1
showimgforguest	1
showfileforguest	1
pollnboptions	4
pollallowvoteone	0
pollenabled	0
poppollscount	5
showpoppollstats	0
polltimebtvotes	00:15:00
pollnbvotesbyuser	100
pollresultsuserslist	0
allow_user_edit_poll	0
maxpersotext	80
ordering_system	mesid
post_dateformat	ago
post_dateformat_hover	ago
hide_ip	1
imagetypes	jpg,jpeg,gif,png
checkmimetypes	1
imagemimetypes	image/jpeg,image/jpg,image/gif,image/png
imagequality	90
thumbheight	600
thumbwidth	800
hideuserprofileinfo	put_empty
boxghostmessage	0
userdeletetmessage	0
latestcategory_in	1
topicicons	0
debug	0
catsautosubscribed	0
showbannedreason	1
showthankyou	1
showpopthankyoustats	0
popthankscount	5
mod_see_deleted	0
bbcode_img_secure	text
listcat_show_moderators	0
lightbox	0
show_list_time	-1
show_session_type	0
show_session_starttime	0
userlist_allowed	1
userlist_count_users	0
enable_threaded_layouts	0
category_subscriptions	post
topic_subscriptions	every
pubprofile	1
thankyou_max	10
email_recipient_count	0
email_recipient_privacy	bcc
captcha_post_limit	0
image_upload	everybody
file_upload
topic_layout	threaded
time_to_create_page	0
show_imgfiles_manage_profile	0
hold_newusers_posts	3
hold_guest_posts	0
attachment_limit	8
pickup_category	1
article_display	intro
send_emails	0
fallback_english	1
cache	0
cache_time	60
iptracking	1
rss_feedburner_url
autolink	1
access_component	0
statslink_allowed	0
superadmin_userlist	0
legacy_urls	1
attachment_protection	0
categoryicons	1
avatarresizemethod	2
avatarcrop	0
user_report	0
searchtime	all
teaser	0
ebay_language	212
allow_change_subject	0
max_links	6
read_only	0
ratingenabled	0
url_subject_topic	1
log_moderation	0
attach_start	0
attach_end	14
attachment_utf8	1
autoembedsoundcloud	0
emailheader	/media/kunena/email/hero-wide.png
user_status	0
signature	1
personal	1
social	1
plain_email	0
moderator_permdelete	1
avatartypes	gif, jpeg, jpg, png
smartlinking	0
defaultavatar	nophoto.png
defaultavatarsmall	s_nophoto.png
quickreply	0
avataredit	0
activemenuitem
mainmenu_id
home_id
index_id
moderators_id
topiclist_id
misc_id
profile_id
search_id
avatar_type	0
sef_redirect	1
allow_edit_poll	1
use_system_emails	0
autoembedinstagram	1
recaptcha_publickey	6LfMiA8TAAAAALlvNYNwlNE1yK7mCBD6ht2x_cBS
recaptcha_privatekey	6LfMiA8TAAAAAK7Gc8D-kJVpayoPdd1RxtFOjobz
recaptcha_theme	red
keywords	0
userkeywords	0
userlist_name	1
usernamechange	0
version_check	1

| Kunena integration settings:

Warning: Spoiler!

Kunena - Finder Enabled
Kunena - AltaUserPoints Disabled
Kunena - Community Builder Enabled: access=1 login=1 activity=1 avatar=1 profile=1 private=1
Kunena - Easyblog Disabled
Kunena - Easyprofile Disabled
Kunena - Easysocial Disabled
Kunena - Gravatar Disabled
Kunena - JomSocial Disabled
Kunena - Joomla Enabled: access=1 login=1
Kunena - Kunena Enabled: avatar=1 profile=1
Kunena - UddeIM Disabled

| Joomla! detailed language files installed:

Warning: Spoiler!

Joomla! languages installed:
pl-PL	Polish (PL)
en-GB	English (en-GB)

Third-party components: CommunityBuilder 2.4.1

Third-party SEF components: None

Plugins: Search - Kunena Search 5.1.1

Modules: Kunena Latest 5.1.1

I have blocked one topic in my forum. I did it as administrator
after I logged inn as other user - registereg and I see that I can edit and answer for the topis with is blocked.

Seems like registered users thet got moderator or < permissions.
I have chcecked on two different users with are not moderator and they have just registered permissions.

Can you check it?

Is the user the author of the topic?

I've tried it with the same setting as in the configuration report, but can't reproduce this issue. I've created a locked toppic for you:
www.kunena.org/forum/163-Feature-Playground/158383-locked-topic
Is it possible for you to write an answer?

810 wrote: Is the user the author of the topic?

no, but the same IP

rich wrote: I've tried it with the same setting as in the configuration report, but can't reproduce this issue. I've created a locked toppic for you:
www.kunena.org/forum/163-Feature-Playground/158383-locked-topic
Is it possible for you to write an answer?

Hi, thx , The toppic is locked. But in my forum the problem exist

In Kunena Administration you can choose Tools. Then Diagnostics where you can fix errors detected.

tomsson wrote:

810 wrote: Is the user the author of the topic?

no, but the same IP

The same IP does not matter.

Seems like registered users thet got moderator or < permissions.
I have chcecked on two different users with are not moderator and they have just registered permissions.

Yes, you see it, when the users would have moderator rights, they would to have the moderator buttons too.

If you lock a topic, shows this topic the padlock symbol? Empty the cache after you locked a topic and test it again.

Slacker wrote: In Kunena Administration you can choose Tools. Then Diagnostics where you can fix errors detected.

yes, there was 6 errors in attachmentOrphaned. I fixed. Celar the cache but the problem exist.

Yes, locked topic have padlock symbol. This is correct. The guest can not post anymore, but registered user stil can post, and seem like registered users have moderator perrmision, even they are just registered. They have moderator buttons and options aviable. This is what I do not understand.

I have double checked the perrmision for users in Joomla core users komponent -> registered, in community builder user are just registered, in kunena component the users have moderator option as deactived.

even they are just registered. They have moderator buttons and options aviable.

It is not possible to register as a moderator, but with a wrong Joomla setting, you can e.g. register as administrator.

Please go in the backend to Kunena -> Users and create a screenshot (but paint over the email addresses).

Here screenshot