Feature #26555

Hide user information from other users (even if they are all members of the same project)

Added by Michael Gerz 6 months ago. Updated 17 days ago.

Status:NewStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Accounts / authentication
Target version:-
Resolution:

Description

If a project is used for communication with customers, the customers should not be able to see each other.

Unfortunately, Redmine allows users to retrieve information about other users (or at least about their existence) in multiple ways: via the project overview page, via ReST interface, via tickets, ...

There should be a global setting to suppress all user information (including their existence) from non-administrators.


Related issues

Related to Redmine - Feature #11724: Prevent users from seeing other users based on their proj... Closed

History

#1 Updated by Mischa The Evil 6 months ago

  • Related to Feature #11724: Prevent users from seeing other users based on their project membership added

#2 Updated by @ go2null 18 days ago

I think a per Group flag (can see only own group members) would be a more useful feature, and woukd work well with the restrictions of #11724.

#3 Updated by Michael Gerz 17 days ago

@ go2null wrote:

I think a per Group flag (can see only own group members) would be a more useful feature, and woukd work well with the restrictions of #11724.

I don't see how this will prevent one customer from seeing other customers. Wouldn't all customers fall into the same group? On the other hand, having one group per customer sounds like an unmanageable workaround to me.

Also available in: Atom PDF