Privacy: Names of private individuals: Show to managers

Bug #1285303 reported by Martin Jülich
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
webtrees
Expired
Undecided
Unassigned

Bug Description

Living individuals are shown to members although "Names of private individuals" is set to "Show to managers".

- create a new tree
- under "Privacy" set "Names of private individuals" to "Show to managers" ("Privacy options" should be enabled of course)
- set a users "Role" to "Member" for that tree
- change birth date of default "John DOE" to "January 1, 1950" or something like that so he is "alive"
- accept changes to birth date
- log in as the afore-mentioned "Member"
- open the individial page of "John DOE"; it should be accessible although you are not a manager

The function "canShow" of class "WT_GedcomRecord" that is called in "./individual.php" calls "_canShow" of the same class. For the example above it is processed to the last line which calls "_canShowByType". Because "WT_Individual" is overriding that function the one of "WT_Individual" is called. Again it reaches the last line which is "return WT_PRIV_USER>=$access_level;". At this point it returns true because the user is of course a "Member" and so the first "canShow" returns true as well.

Revision history for this message
fisharebest (fisharebest) wrote :

The "show private names" option applies only to private individuals.

If an individual is private, then we normally see nothing. This option allows just the name to be shown - even when all other details are private.

> Living individuals are shown to members although
> "Names of private individuals" is set to "Show to managers".

Members are allowed to see living individuals, so this is normal.

We normally use this option to allow visitors to see just the names of living individuals. For example, the demo site uses "show private names" = "visitors". In this chart, a visitor can see just the names of the living indivduals, but all details of the dead individuals.

http://dev.webtrees.net/demo-dev/pedigree.php?rootid=i19&ged=demo
(note, there is a special rule for I1, who is public, even though she is alive).

It is also possible to use this setting with other values ("show to members"). Now, if there is an individual who is "show to admin only", then a member would be able to see just the name.

Unless I have misunderstood you, I think it is working as intended.

Changed in webtrees:
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for webtrees because there has been no activity for 60 days.]

Changed in webtrees:
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.