humhub
humhub copied to clipboard
humhub
Guest can see spaces with visibility "Members Only" in directory
A guest user can see, but not access spaces with visibility "Logged in Users Only"
Does this relate to being able accessing /directory/members as a guest seeing users listed that are registered, while the profiles itself are behind a login?
The users are displayed in Spaces/Directory, but more detailed profile infos like About are not accessible for guests. So it is not planned to "hide" such users from guests.
Do you think we should change this behavior?
I checked a bit. Private spaces cannot be accessed by guests, so the list of members cannot be seen. But as mentioned by @buddh4 I was also able to see a private space in the "New spaces" widget in the sidebar:
The space with "T" is not listed in the directory, thats correct, but shown in the widget, which I assume false.
In addition it shouldn't be able to see members in a private space when clicking on the number of members here:
I could not find a setting to avoid the modal to pop up:
Is there a way to achieve that or find an idea to implement so?
There is also a Members section in the right sidebar.
That can be hidden per space setting:
(For others, its German for: "Hide member overview in stream")
But this has no effect for the "info bar" of a space.
In addition it shouldn't be able to see members in a private space when clicking on the number of members
Yes I tripped over this too. My assumption was that a private Space does not reveal information about the amount of members, the actual members or about it's existence unless you know the exact URL of the space - so one can request becoming a member.
Although I can also see how this could be a per space configuration option so one can completly hide a space from non-members and make it truely invite-only.
Information about Space member count, the members list, activities, ... would only be available to Space members - never non-members in all modules/ widgets.
