1
here is the problem:
i give user "B" moderator access to forum 1 =
but he can delete topic in forum 2 by using the link below:
http://www.domain.com/modules/newbb/topicmanager.php?mode=del&topic_id=1234&forum=2
just replace the topic_id , and change the forum id to 2, which is the forum he has mod access, he how can delete any topic in any forum.
i'm using the latest XOOPS 2.0.32
by the way: i didn't have this problem with 2.0.31