Hi Cathal,

 could you please point me to someone who can confirm whether this is by design or a bug? I've looked at the source; and seems like sending messages to any user in the portal is by design

Thanks,

 Roman

Here's the fix (somewhat limited):

if you want to restrict non-admin lookups to FRIENDS ONLY, do the following:

1. download DNN 6.2.7 source (i'm sure this will work with DNN 7 as well)
2. open MessagingServiceController.cs on line 113
3. replace line 113 with following code:
editor strips generics from my code, go here to copy/paste http://codepaste.net/evenhh
4. add using DotNetNuke.Web.Services; at the top
5. BUILD
6. go to c:/YOUR_DNN_SOURCE_FOLDER/webiste/bin and grab DotNetNuke.Web.dll; that's your modified dll to use in your project

If you have problems building in RELEASE mode; exclude the website project from the build cofiguration in your solution (right click on solution, PROPERTIES > Configuration ; UNCHECK Build checkbox next to "localhost/dotnetnuke_community"

Worked just fine for me; let me know if you have any questions.

p.s. if you want to include the people you follow as well; get relationshipTypeId for Followers and do another foreach; I think my example should be pretty straightforward to add that functionality.