Skip to content

Do private category posts leak into logged-out search?

Need confirmation this is a bug vs a misconfigured is_private flag. A logged-out search for a unique token from a private topic returned a hit in staging last week.

Repro token: zx-private-canary-2026. Please confirm before we file an Issue.

5 replies

Here is the approach that worked on our tenant:

  1. Confirm topic_type stored is the canonical id (question, not support).
  2. Purge topic:detail:v4:{slug} in Valkey if the HTML looks stale.
  3. Recheck JSON-LD for acceptedAnswer after a hard reload.

That unblocked Do private category posts leak into logged-out search? for us. If it still 403s, look at assert_can_post.

Permalink

Worked on TalkMoro v2.9.1 after the cache bump. Confirming so the next reader does not re-debug.

Permalink

This worked. Marking as accepted so the next search hits a solved Question.

Permalink

Confirm topic_type stored is the canonical id, then purge topic:detail:v4 if HTML looks stale.

Permalink

Thanks — leaving this up for the next team that searches the same string.

Permalink

Weekly winners

Solved Solved

Do private category posts leak into logged-out search?

Need confirmation this is a bug vs a misconfigured is_private flag. A logged-out search for a unique token from a private topic returned a hit in staging last week.

Repro token: zx-private-canary-2026. Please confirm before we file an Issue.

Replies 5

Accepted solutionChosen by author or staff
Tomás Herrera

@tomas_sre

Here is the approach that worked on our tenant:

  1. Confirm topic_type stored is the canonical id (question, not support).
  2. Purge topic:detail:v4:{slug} in Valkey if the HTML looks stale.
  3. Recheck JSON-LD for acceptedAnswer after a hard reload.

That unblocked Do private category posts leak into logged-out search? for us. If it still 403s, look at assert_can_post.

Elena Rostova
ModMember

@elena_support

Worked on TalkMoro v2.9.1 after the cache bump. Confirming so the next reader does not re-debug.

Leo Mensah

@leo_ops

This worked. Marking as accepted so the next search hits a solved Question.

Marcus Vance

@marcus_dev

Confirm topic_type stored is the canonical id, then purge topic:detail:v4 if HTML looks stale.

Tomás Herrera

@tomas_sre

Thanks — leaving this up for the next team that searches the same string.

Join the conversation

Sign in or create an account to share your thoughts, solutions, or feedback.