53 enhanced user privacy#55
Conversation
…t-nz#53 - user_list is only visible to admins - Individual user profiles are only visible to admins or themselves - Organisation and group user lists are only visible to the admins of that org/group
|
This looks great @ThrawnCA, love your work! Could you add something to the README describing this behaviour? Happy to merge after that :) |
|
README is updated; feedback welcome. |
|
After reviewing this again, I'm a little concerned that this feature could be too opinionated for many consumers. Would it make sense to provide a flag like |
I assume that you don't allow public registration, then? Why would one regular user need to see another's profile? |
…rity into 53-enhanced-user-privacy
|
@markstuart How about a middle ground? Suppose there were a flag to allow any member of an organisation - not just an org admin - to view the user profiles of other members of the same organisation. That way, if you really want to allow every account on the site to view each other's profiles, you can create an umbrella organisation and make them all members of it. That would also give more flexibility if you only want most profiles to be visible to each other, retaining a few exceptions. |
2 participants
Improve the privacy of user data. If
ckan.public_user_detailsis False, then user profiles should only be visible to their owners or relevant admins.