Ticket #449 (closed defect: invalid)

Opened 4 years ago

Last modified 4 years ago

user search reveals email addresses publicly

Reported by: ed Owned by: jim
Priority: major Milestone: Phase 6
Component: Drupal modules & settings Keywords:
Cc: Estimated Number of Hours: 0.0
Add Hours to Ticket: 0 Billable?: yes
Total Hours: 0

Description

searched users in exeter - got their email addresses - need to be hidden:

​https://www.transitionnetwork.org/search/user/exeter
​http://www.transitionnetwork.org/search/user/exeter

Change History

comment:1 Changed 4 years ago by jim

  • Status changed from new to closed
  • Resolution set to invalid

These are visible only to users with 'administer users' permissions... Those links don't work when not logged in, and when logged in as me (with just social reporter role) I get a list of names only, and the system does not search email.

No problemo hereo...

Note: See TracTickets for help on using tickets.