Hide profile information from anonymous users

Review Request #9887 — Created April 23, 2018 and submitted — Latest diff uploaded

Information

Review Board
release-3.0.x
41582d3...

Reviewers

Previously, public profile information was available to anonymous users.
Now we limit public profile information to authenticated users only. If
a user marks their profile as private nothing has changed and it will
still not be visible to authenticated users (except for themselves and
staff). User infoboxes now use the updated logic so the same information
is visible.

While I was here I cleaned up the other profile test docstrings.

To make things consistent for LocalSites, LocalSite admins can now view
private profiles of their LocalSite members.

Ran unit tests.

Viewed a public profile while logged out and saw no profile information
aside from username.

Viewed a userbox for a user with a public profile and only saw their
username.

    Loading...