For the main_forum_news block the forum name parameter description covers this:
"The name of the forum from which to display news. May be a comma-separated list. Using forum IDs instead of names is more efficient. Default: 'Announcements'. Note: do not refer to a restricted forum or your security will be eroded."
That block did not contain the note about permission leakage.
Never-the-less, the block was designed to work like this.
It goes through the forum driver system, which doesn't support forum permissions.
It would be good to add support for forum permissions specifically for Conversr users, however that is a feature request. I'll add a note to the issue about making permissions optional for blocks, as it ties in well.
(Click to enlarge)
#3505 - Access rights for forum block are incorrect
"The name of the forum from which to display news. May be a comma-separated list. Using forum IDs instead of names is more efficient. Default: 'Announcements'. Note: do not refer to a restricted forum or your security will be eroded."
Is this main_forum_news or main_forum_topics?
You were using main_forum_topics
That block did not contain the note about permission leakage.
Never-the-less, the block was designed to work like this.
It goes through the forum driver system, which doesn't support forum permissions.
It would be good to add support for forum permissions specifically for Conversr users, however that is a feature request. I'll add a note to the issue about making permissions optional for blocks, as it ties in well.