Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-35232

privacy: tag/index.php should be restrictable to logged in users

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Deferred
    • Affects Version/s: 2.2, 2.3
    • Fix Version/s: None
    • Component/s: Tags
    • Labels:
      None
    • Affected Branches:
      MOODLE_22_STABLE, MOODLE_23_STABLE

      Description

      A Moodle which has forcelogin set to no allows non-logged in people (and robots) to see user's full names with associated interests on tag/index.php.

      In my opinion (and in the opinion of a large school I work with), this should be restricted to logged in users as a default. A "site policies" option could be added to allow non-logged in users to access the page.

      I'd be happy to submit a patch for this, just let me know.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              moodle.com moodle.com
              Reporter:
              brianking Brian King
              Participants:
              Component watchers:
              Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Sara Arjona (@sarjona)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: