This is a major issue as it underminds the need for privacy.   When someone creates a private group (and groups are attached to forum per group configuration in admin) those posts are sent over to the forum_post table.

The problem is that the forum_post table does not destingquish between forum posts and group post feeds, it just sticks them all in the table as the same.  There is no field in the table which allows and way to know where that post came from other than topicId. 

This is a concern because any plugin that pulls from the forum_post table will show any and all posts to everyone on the site.  Those posts were originally private and should remain so.

Solution...   add a table field to forum_post table called topsecet (or whatever you want to call it)  it should be an enum '0','1'   and should default to 0

when a private group post is added to the forum_post table it should make that field (topsecret) a 1  

when any plugin sees that 1 it should not pull that content unless the plugin pulling that content is the originating group topidId. 

you might also really consider adding even another field for group number so that any plugin will have two data fields to check for validity in data process (two checks are better than one) 

thanks..

Or there needs to be an array build of all topicId or group Id that are set to private and anything pulled from the forum_post table (or newsfeed table for that matter as well)  needs to be filtered thru that array.

i have attached an image..

thanks