Privacy: Names of private individuals: Show to managers
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
webtrees |
Expired
|
Undecided
|
Unassigned |
Bug Description
Living individuals are shown to members although "Names of private individuals" is set to "Show to managers".
- create a new tree
- under "Privacy" set "Names of private individuals" to "Show to managers" ("Privacy options" should be enabled of course)
- set a users "Role" to "Member" for that tree
- change birth date of default "John DOE" to "January 1, 1950" or something like that so he is "alive"
- accept changes to birth date
- log in as the afore-mentioned "Member"
- open the individial page of "John DOE"; it should be accessible although you are not a manager
The function "canShow" of class "WT_GedcomRecord" that is called in "./individual.php" calls "_canShow" of the same class. For the example above it is processed to the last line which calls "_canShowByType". Because "WT_Individual" is overriding that function the one of "WT_Individual" is called. Again it reaches the last line which is "return WT_PRIV_
The "show private names" option applies only to private individuals.
If an individual is private, then we normally see nothing. This option allows just the name to be shown - even when all other details are private.
> Living individuals are shown to members although
> "Names of private individuals" is set to "Show to managers".
Members are allowed to see living individuals, so this is normal.
We normally use this option to allow visitors to see just the names of living individuals. For example, the demo site uses "show private names" = "visitors". In this chart, a visitor can see just the names of the living indivduals, but all details of the dead individuals.
http:// dev.webtrees. net/demo- dev/pedigree. php?rootid= i19&ged= demo
(note, there is a special rule for I1, who is public, even though she is alive).
It is also possible to use this setting with other values ("show to members"). Now, if there is an individual who is "show to admin only", then a member would be able to see just the name.
Unless I have misunderstood you, I think it is working as intended.