[Sakai Jira] Updated: (SAKIII-1238) profile / anyone with the link to a users profile not logged into the system may view it despite the profile settings

[Aaron R Widner (JIRA)]

     [ http://jira.sakaiproject.org/browse/SAKIII-1238?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Aaron R Widner updated SAKIII-1238:
-----------------------------------

    Description: 
In both browsers users can view a user's profile despite the settings of who can view the profile.  This is for anyone not logged into the system.  In testing the settings seem to be somewhat dependent on what is chosen in the basic information (BI) section.  Example, In the BI I can set this to 'Public' and in the About Me (AM) I can set it to Only Me.  Logout and/or use another browser I can view the full profile except for Publications (see screenshot 1).  If I choose anything other than public in BI and in AM I choose public, my BI and Publications show (see screenshot 2).   

There is no 'Who can view or search this?' in the Publications area.  I was not sure if this was by design or if it is actually missing.

  was:In both browsers users can view a user's profile despite the settings of who can view the profile.  This is for anyone not logged into the system.  In testing the settings seem to be somewhat dependent on what is chosen in the basic information (BI) section.  Example, In the BI I can set this to 'Public' and in the About Me (AM) I can set it to Only Me.  Logout and/or use another browser I can view the full profile except for Publications (see screenshot 1).  If I choose anything other than public in BI and in AM I choose public, my BI and Publications show (see screenshot 2).   


> profile / anyone with the link to a users profile not logged into the system may view it despite the profile settings 
> ----------------------------------------------------------------------------------------------------------------------
>
>                 Key: SAKIII-1238
>                 URL: http://jira.sakaiproject.org/browse/SAKIII-1238
>             Project: Sakai 3 UI Dev
>          Issue Type: Bug
>          Components: Profile, Security
>    Affects Versions: Sprint 5 (Ends 30/09/10)
>         Environment: DEBUG: Nakamura Version: ucam-2010-09-28-01-build-16-g50f0a90 | UX Code Timestamp: Thu Sep 30 2010 00:07:39 GMT-0400
> DOC mod date: 09/30/2010 10:08:31 | PLACE: ~arwidner
> OS Windows 7 & Mac OSX 10.6.4
> Browsers FF3.6.10 and IE8
>            Reporter: Aaron R Widner
>            Assignee: Nicolaas Matthijs
>             Fix For: Sprint 5 (Ends 30/09/10)
>
>         Attachments: screenshot1.png, screenshot2.png
>
>
> In both browsers users can view a user's profile despite the settings of who can view the profile.  This is for anyone not logged into the system.  In testing the settings seem to be somewhat dependent on what is chosen in the basic information (BI) section.  Example, In the BI I can set this to 'Public' and in the About Me (AM) I can set it to Only Me.  Logout and/or use another browser I can view the full profile except for Publications (see screenshot 1).  If I choose anything other than public in BI and in AM I choose public, my BI and Publications show (see screenshot 2).   
> There is no 'Who can view or search this?' in the Publications area.  I was not sure if this was by design or if it is actually missing.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.sakaiproject.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira