| 5 | | In my case, I was developing a custom members site with access-protected course pages, and ended up showing ALL courses to the members without any authorization rather than ZERO courses |
| | 5 | In my case, I was developing a custom members site with access-protected course pages, and ended up showing ALL courses to the members without any authorization rather than ZERO courses. |
| | 6 | |
| | 7 | Logic being |
| | 8 | Member A - can see **posts_in => [1,2]** - show at most 2 posts |
| | 9 | Member B - can see **posts_in => [1]** - show at most 1 posts |
| | 10 | Member C - can see **posts_in => []** - show at most 0 posts |
| | 11 | |
| | 12 | There really wasn't anyway to predict that member C would then see ALL posts |