"Private" comments visible to all users

[Isolator70]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github (I've searched it).
• I agree to follow Nextcloud's Code of Conduct.

What went wrong, what did you observe?

If the user sets the option "Only visible for "creator of poll" at a comment, it nevertheless is visible to ALL users with access to the poll.

What did you expect, how polls should behave instead?

The feature shall do what it tells: Make it only visible to creator of the poll. This might be a serious privacy issue!

What steps does it need to replay this bug?

1. John Doe creates a poll
2. Share it with user A (Link)
3. User A enters his stuff and leaves a comment with activated switch "only visible for John Doe"
4. Share the poll with User B
5. User B enters his data and watches the comments
6. He sees the comment of User A

Affected polls version

Unknown, Nextcloud V34 (?)

Installation method

Installed/updated from the appstore (Apps section of your site)

Installation type

First time installation

Can you rule out that any extension you use is involved in the issue?

• I have checked all browser extension

Which browser did you use, when experiencing the bug?

• Firefox
• Chrome
• Chromium/Chromium based (i.e. Edge)
• Safari
• Other/Don't know

Other browser

No response

Add your browser log here

Additional client environment information

No response

NC version

Nextcloud 33 (Hub 26 Winter)

Other Nextcloud version

Maybe even later version

PHP engine version

Other/Don't know

Other PHP version

No response

Database engine

Other/Don't know

Database Engine version or other Database

No response

Which user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other/Don't know

Add your nextcloud server log here

Additional environment informations

No response

Configuration report

List of activated Apps

Nextcloud Signing status

Additional Information

No response

[dartcafe]

Can't confirm

Carl adds a comment	dartcafe can see it	Conan cannot	as well as public Harry

Any other circumstances on your side?

[Isolator70]

Any other circumstances on your side?

Don't know. Just set up a simple poll with date selection. Just crosschecked - for me it is 100% reproducible.

[Isolator70]

Got it: You are working with users which have an account, in my case none of the users has an account or is logged in!