A non-GM, non-Co-GM, non-Owner of a Character has reported that they are able to see the Wish Lists and Goals sections of all NPCs on one of my campaigns. Had to hurriedly go back and move thirty or fourty characters worth of notes to GM Secrets after he stumbled upon some major spoilers.



So, permissions on these sections appear to be broken.



Also some sort of 'view as' function for GMs to test what can or cannot be seen by certain players would be useful for testing.