Communication List Security Role

[jcjones37]

Prerequisites

• [x] Put an X between the brackets on this line if you have done all of the following:
  • Did you perform a search at https://github.com/issues?q=is%3Aissue+user%3ASparkDevNetwork+-repo%3ARock to see if your bug or enhancement is already reported?
  • Can you reproduce the problem on a fresh install or the demo site?
  • Did you include your Rock version number and client culture setting?

A Picture Is worth a Thousand Words

No screenshot supplied.

Description

Communication List Security is not honored on the external site when using the block [Communication List Subscribe]

Each Communication List has the opportunity to set the security on the group. Communication Lists are also able to be sorted into categories. Communication List Categories are able to be displayed on the external site using the block [Communication List Subscribe]

However, if a Communication List has the security set to [View Only] by [Staff], the external site block [Communication List Subscribe] does not honor that security role.

Steps to Reproduce

1. Create a Communication List Category - Lets call it [Staff]
2. Create a Communication List - Lets call it [Staff Update]
3. Set the Security on this Communication List [Staff Update] to [View]: Rock Admin - Allow; Staff - Allow; All Users - Deny.
4. Create an External Page - Lets call it [Subscriptions]
5. Add a block to this new page [Communication List Subscribe]
6. Update the block settings to pull in communication lists of category [Staff]
7. Log out of Rock, view this new page, notice the Communication List [Staff Update] is still shown.

Expected behavior:

I would expect the external site to honor security settings on communication lists no matter which category is being illustrated in the block settings.

Actual behavior:

Security settings on communication lists do not seem to be honored on the external site when using the block [communication list subscribe].

Versions

• Rock Version: [13.6]
• Client Culture Setting: [en-US]

┆Attachments: image.png