search

opensource-socialnetwork / ProfAccess

Profile access components allows you to disable profile access for non loggedin users
2 stars 7 forks source link

minor glitch an some thoughts ... #1

Open githubertus opened 9 years ago

githubertus commented 9 years ago

I just installed this module successfully - but I can still access urls like http://ossn/album/view/36 or http://ossn/photos/view/98 Thus, with a little knowledge and guessing random numbers I'm able to get a lot of what's inside :)

Next: I was expecting the module to add a private/public switch to each user settings individually, and not to be a global site switch?! I think, people are very different: some really like to be disclosed on the net, others hate it.

lianglee commented 9 years ago

You right i have a plan for this , i just made quick component as someone was asking on community site

ctlui commented 9 years ago

Any news, as it's a privacy security issue may be it'll better to include it in OSSN code. All photos, covers albums are readeable from unregistred users.

Thanks

lianglee commented 9 years ago

@ctlui i agree with you, we should provide privacy system in ossn v3