amilisic
Forum Replies Created
-
Hi @champsupertramp
I dont see any setting relating to customization for the members role. All the settings are viewable in the video I sent you. It is a customer user role I have created called “members”.
I’ve created a new role and migrated all the settings, tested it and it will still allow users to see other profile names. Ive checked setting can allow to make profile private but that did not change anything. same outcome.
Not sure what else is left,appreciate your effort
hope for a solution,I attached a recording below showing the page settings, user roles settings for “members”, assigned test123 user role settings, and testing on the website shows the test123 user can access another profile via direct url and display the name.
UM version is 2.2.5
WP version is 5.8.2
Hope this clarifies the issue,Thanks,
Please find the attached screenshots of the user role settings and the test user settings.
https://drive.google.com/file/d/1z6RWS9oGM7GcGE5R9Q2wivsyjKQ7WvC7/view?usp=sharing
https://drive.google.com/file/d/13vcyrlVNN2vDkwGZAOy1GXPh9aE09Bl4/view?usp=sharing
https://drive.google.com/file/d/1xAXVcjBKROjwEXy5ctVfjXEpndSfM3-0/view?usp=sharing
Also the test user only has 1 role assigned.
If I may throw out an idea, in the user settings on WP there is an option called “Display name publicly as” – does this setting override the privacy settings set up on ultimate member? Because it when the manual URL of the specific user is put in once logged in as a test user, only their public name is viewable no other information. But this is still considered a privacy problem.
Hope to hear back with any other suggestions
Im not. In this case I created a test account with only members role and loged into that test account. I made sure that the webpage and role settings have other profiles viewable “off” setting. Other issue is how to redirect those attempts (when manually accessing other users via url) back to the user loged in page.
I hope you can helpHi @champsupertramp ,
Ive tried that, and its unchecked but the individual user can still see other user data by just manually changing the /user/<username> url.