Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57231

everyone can view user pictures

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: 3.1.3
    • Fix Version/s: None
    • Component/s: Roles / Access
    • Labels:
      None
    • Affected Branches:
      MOODLE_31_STABLE

      Description

      The url of userpicture is
      http://example.com/pluginfile.php/<userid>/user/icon/<theme>/f1
      to example: https://moodle.org/pluginfile.php/413184/user/icon/moodleorgcleaned_moodleorg/f1

      Have privacy problem because of everyone can view user picture include guest.
      I blocked user:viewdetails for guest but he still can view the user pictures of all the users.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              amiad Amiad Bareli
              Participants:
              Component watchers:
              Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Sara Arjona (@sarjona)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: