No Code Attached Yet bug
avatar woluweb
woluweb
27 May 2026

What happened?

When a Category is set on anything else than Public (Registered for example), all the Articles belonging to that Category are not publicly available any more.

Even if the URL goes public, a visitor would get the following message:
403 You don't have permission to access this. Please contact a website administrator if this is incorrect.

Version

6.1

Expected result

Similarly, Smart Search should not reveal those Articles.
It should work just like the rest of Joomla: it should respect the cascade of ACL.

Actual result

Smart Search does reveal those Articles, which should not be the case to be coherent with the rest of Joomla

System Information

No response

Additional Comments

The only way to have ACL working correctly for those Articles is to

  • set each of the Articles within the Registered Category on Registered
  • clean the Smart Search Index
  • reindex
avatar woluweb woluweb - open - 27 May 2026
avatar woluweb woluweb - change - 27 May 2026
Labels Added: bug
avatar woluweb woluweb - labeled - 27 May 2026
avatar joomla-cms-bot joomla-cms-bot - change - 27 May 2026
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 27 May 2026
avatar piyusshkumar
piyusshkumar - comment - 7 Jun 2026

I can reproduce this on Joomla 6.1
When the item is public but its parent is Registered, Guest user can still see the item in Smart Search result but opening the result return an access denied .
Registered user can access the item normally.

The indexed record in #___finder_links keeps the item access level 1 rather than inherited access level from the category 2.

But this could be a expected behavior or bug not sure . This also is reproducible for Content and Contacts and may be Newsfeed also.

avatar piyusshkumar
piyusshkumar - comment - 7 Jun 2026

I can reproduce this on Joomla 6.1
When the item is public but its parent is Registered, Guest user can still see the item in Smart Search result but opening the result return an access denied .
Registered user can access the item normally.

The indexed record in #___finder_links keeps the item access level 1 rather than inherited access level from the category 2.

But this could be a expected behavior or bug not sure . This also is reproducible for Content , Contacts and may be Newsfeed also.

Add a Comment

Login with GitHub to post a comment