Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57231

everyone can view user pictures

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Duplicate
    • 3.1.3
    • None
    • Roles / Access
    • None
    • MOODLE_31_STABLE

    Description

      The url of userpicture is
      http://example.com/pluginfile.php/<userid>/user/icon/<theme>/f1
      to example: https://moodle.org/pluginfile.php/413184/user/icon/moodleorgcleaned_moodleorg/f1

      Have privacy problem because of everyone can view user picture include guest.
      I blocked user:viewdetails for guest but he still can view the user pictures of all the users.

      Attachments

        Issue Links

          duplicates

          Improvement - An enhancement to an existing Moodle feature. MDL-26508 Protect user profile images to be restricted to users of an enrolled course

          • Minor - Minor loss of function where workaround is possible
          • Closed

          Activity

            People

              Unassigned Unassigned
              amiad Amiad Bareli
              David Woloszyn, Huong Nguyen, Jake Dallimore, Meirza, Michael Hawkins, Raquel Ortega, Safat Shahin, Stevani Andolo
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: