How can I hide users profile for general public ?
Our security department has a complain regarding the fact that in our Redmine instalation user porfiles are public, and anyone can obtain all the profiles with the url ej https://[host]/redmine/users/[number].
My question is, Is there a way to hide users and prevent this form happening ?
Thanks in adevance.
Change "Users visibility" setting from "All active users" to "Member of visible projects" for all roles.