Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-35232

privacy: tag/index.php should be restrictable to logged in users

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Deferred
    • Icon: Minor Minor
    • None
    • 2.2, 2.3
    • Tags
    • None
    • MOODLE_22_STABLE, MOODLE_23_STABLE

      A Moodle which has forcelogin set to no allows non-logged in people (and robots) to see user's full names with associated interests on tag/index.php.

      In my opinion (and in the opinion of a large school I work with), this should be restricted to logged in users as a default. A "site policies" option could be added to allow non-logged in users to access the page.

      I'd be happy to submit a patch for this, just let me know.

            moodle.com Moodle HQ
            brianking Brian King (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:

                Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.