Password-protected boards problem
 

I feel like I'm missing something obvious with this but...

We have some private boards in an admin section of the Forum.

The boards are visible only to those with permission to access them. And they cannot be accessed by users without proper permissions even if they have an address to a thread within the board. That much is verified and works perfectly.

When I set up these forums, I required a password to access them. The note in the Forum Password option says
Quote:
(Optional: This acts in addition to any other permissions set for this forum)
I took that to mean the mods would have to enter a password in order to enter the boards yet, from the beginning, they were able to enter and post without being challenged for a password. This is true for both regular mods and super mods.

I set up a test super mod,accessed the Forum through a different browser, logged in and was able to enter the super mod board without entering a password. I then logged out, cleared cookies and browsing history, closed the browser, reopened it, and logged in with the same results.

I'm not sure it's a huge problem given the layers of security noted above, but I'd rather have that added layer of a password given that our old Forum was under attack by some really sick people a few months back,which is what prompted our move to vB.

Current settings:

Quote:
Access Options

Forum Password - [set for each board]

Apply This Password to Child Forums (Only if changed) - No

Can Have Password - No
(Setting this to no will prevent a password from being inherited and from being set by moderators)
(Note: You may still set a password manually)
There are no child Forums and I assumed the last one meant mods would be prevented from setting their own passwords.

Am I missing a setting somewhere? Or does hiding the boards from those without permission to use them override the password requirement? Or something else?

Thanks for any insights.