supdegrave / meteor-evm

Event Volunteer Management system, built using meteor.js
2 stars 1 forks source link

user profile: if no user is logged in, all user information is shown #3

Closed supdegrave closed 9 years ago

supdegrave commented 10 years ago

All user data (including restricted fields) are shown when a user profile page (/users/) is accessed if user is not logged in.

MonkeyDo commented 9 years ago

I cannot reproduce that behavior. Are you sure you are not logged in when that happens? (Try Meteor.userId() which should return null. Does on my machine.

MonkeyDo commented 9 years ago

Just checked: user must be signed in in order to be redirected to user pages.