Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57231

everyone can view user pictures

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Minor
    • None
    • 3.1.3
    • Roles / Access
    • None
    • MOODLE_31_STABLE

    Description

      The url of userpicture is
      http://example.com/pluginfile.php/<userid>/user/icon/<theme>/f1
      to example: https://moodle.org/pluginfile.php/413184/user/icon/moodleorgcleaned_moodleorg/f1

      Have privacy problem because of everyone can view user picture include guest.
      I blocked user:viewdetails for guest but he still can view the user pictures of all the users.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              amiad Amiad Bareli
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Clockify

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.