KB: Unpermitted categories are displayed after browsing

[rolfschmidt]

Infos:

• Used Zammad version: 5.1
• Installation method (source, package, ..): all
• Operating system: all
• Database + version: all
• Elasticsearch version: all
• Browser + version: all

Expected behavior:

• No unpermitted categories displayed.

Actual behavior:

There is some weird bug where i can see categories even if my role has no access to it.

All articles in it are set to internal in this category so the customer should not be able to see category 222.

It has 2 internal articles which are only visible for the agent.

If i do a refresh login with a customer then:

-> Open knowledge base

-> Click in a category where i have access

-> Click on a article where i have access

-> Switch back to overview via breadcrumb (Book icon)

-> I see the hidden category which should not be available

Yes I'm sure this is a bug and no feature request or a general question.