On the Discussion Forums, different users can have access to every forums despite the access rules laid down in the various sub-forum sections. (Reading, writing, moderating -> whatever rules were initially set by the admin, it's as if they no longer exist). As an admin on your own world, deleting the access rules, then putting them back, doesn't change anything; the problem persists. As an admin on your own world, creating new private forum sections doesn't change anything either: everyone has access to them, as if they were public.   In my opinion, this is a major breach, because in a role-playing campaign, each player with his own private section has sensitive information that is hidden from the rest of the players for the sake of scenario development and the plots in progress.   In fact, all the players have the possibility of spoiling each other (and this can be catastrophic in a campaign).   Many thanks for your work, and good luck!

Steps to Reproduce

You must have a forum's section with specific rules that restrain access to other users.   1. Connecting to WorldAnvil 1. Go to the Discussion "Boards"'s sections. 1. Click on a private section with restrain access. 1. Have access to the section, despite restrictions.

Operating System

Browser