Feature #12796

Display user's groups on profile

Added by Scott Roland over 6 years ago. Updated 2 months ago.

Status:ClosedStart date:
Priority:NormalDue date:
Assignee:Jean-Philippe Lang% Done:

0%

Category:Groups
Target version:4.1.0
Resolution:Fixed

Description

When I go to My account page, I would like to be able to see which groups I am a member of:
http://demo.redmine.org/my/account

The listed groups should link to their individual group pages. This would require a fix for Bug #12795 (Non-admin users cannot get info about groups).

0001-Show-user-groups-in-user-profile-page.patch Magnifier (3.61 KB) Marius BALTEANU, 2019-03-10 10:24

admin.png (87.7 KB) Marius BALTEANU, 2019-03-10 10:32

non-admin.png (87.7 KB) Marius BALTEANU, 2019-03-10 10:33


Related issues

Related to Redmine - Feature #12795: View group members by non-admin users New

Associated revisions

Revision 17973
Added by Jean-Philippe Lang 4 months ago

Display user's groups on profile (#12796).

Only for admins or when viewing its own profile.

History

#1 Updated by Bruno Spyckerelle over 6 years ago

This is a very important feature, especially when you have a huge number of users.

#2 Updated by M.Moorad HEETUN 5 months ago

Hello,

there is a workaround for this. If for example you want to get to know the members of the group A, create a test ticket and assign it to the group A, then you will receive a notification by mail and you will get all the users in that particular group.

Hope that helps.

Best Regards

#3 Updated by Marius BALTEANU 5 months ago

  • Assignee set to Marius BALTEANU

#4 Updated by Marius BALTEANU 4 months ago

Here is a patch that adds to the user profile page the groups in which the user is a member of.

If the current user is admin, the group name links to edit group membership page from administration, otherwise, it is just the group name. if the future, we can easily extend the link_to_group method to point to a group profile page and implement #12795.

Admin:

Non admin user:

#5 Updated by Marius BALTEANU 4 months ago

  • Assignee deleted (Marius BALTEANU)

#6 Updated by Hinako Tajima 4 months ago

The patch written by Marius BALTEANU shows all the groups which the user belongs appears on the user's profile page, but I wondered it may cause security problems.

Group names include important information such as organization names, product names, service names. Those names may not want to be seen by anyone except members of a particular project.

In order to avoid sensitive information is unintentionally disclosed to all users, I suggest that group visibility follow the same settings as the role's users visibility.
What to say when users visibility setting is set to "Members of visible projects", the current user should able to see groups only when the current user is a member of the project.

#7 Updated by Marius BALTEANU 4 months ago

Hinako Tajima wrote:

The patch written by Marius BALTEANU shows all the groups which the user belongs appears on the user's profile page, but I wondered it may cause security problems.

Group names include important information such as organization names, product names, service names. Those names may not want to be seen by anyone except members of a particular project.

In order to avoid sensitive information is unintentionally disclosed to all users, I suggest that group visibility follow the same settings as the role's users visibility.
What to say when users visibility setting is set to "Members of visible projects", the current user should able to see groups only when the current user is a member of the project.

I'm not sure that I fully understand your proposal. My proposed patch just adds to the user profile page the user's groups. If the current user has rights to see the profile page (login, first name, last name, custom fields, etc) of another user (based on his role permissions), it'll see also the groups. I think we complicate too much if we try to show only the groups that contain members of his visible projects (if this is the request).

#8 Updated by Jean-Philippe Lang 4 months ago

  • Status changed from New to Closed
  • Assignee set to Jean-Philippe Lang
  • Target version changed from Candidate for next major release to 4.1.0
  • Resolution set to Fixed

I understand the issue. The request was about viewing its own groups so a safer solution is to display the groups for administrators and the current user only. I've updated Marius' patch accordingly, thanks.

#9 Updated by Go MAEDA 2 months ago

  • Subject changed from There is no way for a user to find out which groups they are a member of to Display user's groups on profile

Also available in: Atom PDF