We build. You grow.

Get best community software here

Start a social network, a fan-site, an education project with oxwall - free opensource community software

Guests can browse users | Forum

Lester Sagastume
Lester Sagastume Apr 14 '14
Hello,


I have a privacy concern. I noticed that guests can manually type /users after my site and they are able to get a list of my users. Here is an example:


http://californiapathfindersscsm.com/users


Please help.

ross Team
ross Apr 16 '14
This is how it works right now. In order to change this is considered as a custom code modification. 
Lester Sagastume
Lester Sagastume May 6 '14
is there any suggestions as to how I can get around this? This is a major privacy concern


Wilson
Wilson May 6 '14
Hey Lester,

Well I’ve been doing some testing on this issue and in my opinion this is defiantly a privacy issue that needs to be fixed. But I may have a work around you may want to take in consideration. (This may be the way it was intended)

First, make one or a two simple html pages with content showing what your web site looks like (maybe take a few “print screen” shots of it now) and design your html page or pages. Make sure you add your “JOIN” link or a cool join image (http://californiapathfindersscsm.com/join) on your html page somewhere so that the user can sign up to your site.

Second, go to your oxwall /admin/permissions area of your site. You should be at “Global Privacy” area, looking below at “Guests can view the site” check the “NO” box and press “save”. Now no one can see your site unless they have registered.

For added security I have also checked the “Restrict view “ box in each widget. You can do this by going to your “main” page (http://californiapathfindersscsm.com/index) and click onto the “Customize This Page’ link. Then click onto each widget you have on your main page. The “Settings” tab will pop open and there you will see the “Restrict view “ check the box and then you will see “Visible for user roles” I have “free” checked and ‘Guest” unchecked.

After you do all of this, try http://californiapathfindersscsm.com/users and see what you get now!

Yes your site will not be accessible to guest now but, that’s why you have designed a few simple html pages to show off what members get when they sign up.

This work around should be simple and best of all its FREE! Hope it helps…pm me if you like to pick my brain more…good luck and enjoy this cool script!

Wilson
The Forum post is edited by Wilson May 6 '14
Lester Sagastume
Lester Sagastume Jun 9 '14
Thank you for the information Wilson. The one thing I have an issue with is that our events page needs to be visible to the public. This is because they need to be able to see the "meet and greets" available. I think I need to play with it more but I do agree it is definitely a privacy issue that should be addressed.
ross Team
ross Jun 9 '14
You can hide the menu item 'members', however it will be available if you type the URL because it is permalink. You can make a suggestion on uservoice for our team to consider it for future development. 
Shay Matityahu
Shay Matityahu Jul 23 '15

I wonder if Ican prevent access to a user list also to members on the site.
I do not think it is right to have such access to someone who is not administrator.


So my question is it possible to do this and how?


Thanks in advance


Shay

ross Team
ross Jul 23 '15

Quote from ross You can hide the menu item 'members', however it will be available if you type the URL because it is permalink. You can make a suggestion on uservoice for our team to consider it for future development. 

Shay Matityahu
Shay Matityahu Jul 23 '15

I did


Thanks