Looking at the 'Staff post' section on the Kumos website shows staff posts in private forums with potential sensitive informations. See screenshot below
(Screenshot removed since bug is now fixed :))
Taking the liberty of tagging you in this so you can fix before any private information is leaked!
Hey , thanks for the quick report (and the tag)!
You were right - the "Staff Posts" tab in the activity feed wasn't properly checking forum access permissions, so posts from restricted forums were leaking through. This is fixed now.
Let me know if you see anything else like this!
💖 ✨ 🤗