Customer Issue

Documents attached to campaigns are appearing in search results for users who are not included in the campaign’s target audience. While the parent campaign itself is correctly hidden from the "Posts" tab for unauthorized users, the attached documents are discoverable under the "Documents" tab in the search results.

If an unauthorized user clicks on the document in the search results, they are directed to a "Content not found" page. However, the document's metadata (such as the file name and title) is exposed in the search interface, which may contain sensitive information.

Environment

• Creator Studio | Campaigns

• Member Experience | Search (Web/Mobile)

Issue Details

The platform's search indexing for documents does not currently respect the "focused content" (audience restriction) logic applied to standard campaign content. When a campaign is targeted to both a public topic and a restricted audience with the visibility limit enabled, the document search surfaces the attachment to any user with visibility to the topic, bypassing the audience-level restriction.

This results in a discrepancy where the campaign post is hidden, but its attachments remain discoverable via metadata search.

Steps to Reproduce:

1. Create a campaign in the Studio that includes one or more attached documents.

2. Set the campaign to a restricted audience and enable the Limit campaign to specified Audiences (focused content) toggle.

3. Target the campaign to a public or untargeted topic as well.

4. Publish the campaign.

5. Sign in to the Member Experience as a user who is not part of the targeted audience.

6. Search for a term that appears in the attachment's file name or the campaign title.

7. Observe that the document appears in the search results under the Documents tab.

Resolution

There is currently no technical workaround to prevent documents from appearing in search results if they are attached to a campaign with topic visibility, even if audience restrictions are in place.

Recommendation:
Customers are advised to avoid attaching sensitive documents to audience-restricted campaigns if those campaigns are also associated with public or broadly accessible topics. Consider using alternative methods for sharing sensitive files until a fix is deployed.

Please check the current status of this issue on the Known Issues Tracker. (Issue ID: FE-38649)