] > cubicweb #1177702: don't have permission to see all users of the site for users (CubicWeb's Forge)

cubicweb #1177702: don't have permission to see all users of the site for users [open]

Users should not be able to see all users information of the site. For example a user don't want necessarily that all users can see his email address.

prioritynormal
typebug
done in<done in not specified>

See also

Comments

  • 2010/07/12 14:59, written by sthenault | reply to this comment

    this is more an end application choice. It has been choosen to grant 'users' to see other cwuser by default to avoid costly read permissions by default. Application such as jplextra do change this.

    Now if there is a consensus that it shouldn't be the default, I may revise that choice.

(add comment)