When message_subscribe_get_subscribers builds it's list of uids - it does no check to make sure that users are not blocked.

This results in blocked users getting messages to content they were subscribed to despite being blocked.

This seems to me like a bug becuase as a site admin when I block a user I expect that all communications channels would be blocked.

Perhaps there is some other reasons that this is "by design"?

an access check within this functions seems prudent if this behavior is unintentional. I can supply a patch is this is indeed a bug. for now I've patched my local copy.

Comments

nick.monaco15@gmail.com’s picture

Crazy how the check is not in the initial creation of the module. In the dev branch though.

bluegeek9’s picture

Status: Active » Closed (outdated)