Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-7094

Force login for images as config or detailed setting please

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: 1.6.2
    • Fix Version/s: None
    • Component/s: General
    • Labels:
      None
    • Database:
      Any
    • Affected Branches:
      MOODLE_16_STABLE

      Description

      It has been noted for some time that it is possible to see user pix even when not logged in.
      http://moodle.org/mod/forum/discuss.php?d=18587
      I thought that this was a security hole but apparently it is deliberate (see above thread).

      However in some countries, at least Japan, people own the rights to their own image, and the freedom of information act proscribes the distribution of any information which allows the identification of the individual. The fact that a person looking like this
      http://moodle.org/user/pix.php/1/f1.jpg
      for instance is at a particular instituation, learning xyz, is in Japan a breach of legal rights, I believe.

      Photos are considered as private and personal as name or profiles so the image equivalent of
      $CFG->forceloginforprofiles
      perhaps
      $CFG->forceloginforimages
      would be greatly appreciated.

      Please see also this thread in Japanese
      http://moodle.org/mod/forum/discuss.php?d=56692

        Attachments

          Activity

            People

            Assignee:
            dougiamas Martin Dougiamas
            Reporter:
            timtak Timothy Takemoto
            Participants:
            Component watchers:
            Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias, Sujith Haridasan
            Votes:
            3 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: