Re: Default Guest Permissons to view Profiles.
Reply #1 – June 23, 2014, 09:58:52 pm
Yeah, I'm seeing this behavior as well. I see the guest permissions that are set, lemme take a screenshot and attach it. See the screenshot, lower-right corner, for the permission in error.
Re: Default Guest Permissons to view Profiles.
Reply #3 – June 24, 2014, 04:08:59 am
emanuele
Global Moderator
I thought they were since SMF 1.1, and went back searching why it was changed... I discovered that it was never actually changed and it has been like that since probably day 1. LOL No hard feelings about it, I see on my forum is disabled (so I assume the original admin set it up like that, or the importer from phpBB did the magic, or any combination of the two). Actually as a casual lurker I find a bit annoying when I can't see the profile, not because I care about the profile, but because there are useful pages like for example the list of posts and topics, that are public, but are hidden to the world just because of the "last login" info (that is really the only thing you can't find directly in any topic of the forum, this and the registered date, unless the theme puts it next to each post).
Re: Default Guest Permissons to view Profiles.
Reply #4 – June 24, 2014, 11:22:09 pm
My view is that in the interest of member privacy, no profile views should be permitted by default to guests. Members should have the say as to what is shown on their public profile to other members and to guests. Profiles that show member login/logout times, location, etc. are easy for data mining. Sounds petty unless you are a female that is being stalked by an ex or some psycho. Probably does not happen much but why provide the opportunity. Members should have to opt in to their profile information being made public and not opt out.
Re: Default Guest Permissons to view Profiles.
Reply #5 – June 29, 2014, 06:48:03 pm
emanuele
Global Moderator
So profiles not visible to guests?
Re: Default Guest Permissons to view Profiles.
Reply #8 – June 30, 2014, 08:09:30 am
emanuele
Global Moderator
Yes, Eliana, that's what I'd like to have, but is a bit more than just "a small thing", because to do it properly a new option for custom fields is required as well. Yes, we could just hide them "for now"... could be an option as well. Though, hide them to guests doesn't solve the issue either (like remove the permission): one can just register and have all the data. At the moment there is no such a thing like "privacy" implemented in Elk, and it requires a bit more than just change a permission or hide a field to guests.
Re: Default Guest Permissons to view Profiles.
Reply #10 – June 30, 2014, 06:26:09 pm
emanuele
Global Moderator
Honestly I still have not thought about anything. The "best" I can think of while writing is something like the "contact" setting: show my personal details to => everybody, => only to buddies, => only admins. And that's all. Well, maybe another voice to the list "only registered members" (we know it doesn't change much, but better have it).