Is it possible to prevent anonymous users from viewing member profiles? More specifically I would like to block anonymous users from seeing the member's private information (email address, ICQ etc) but allow them to see their name and previous posts.

I am currently able to do this in geeklog and would like to see this feature in xoops.

Thanks
Graham

You can prevent anonymous users from viewing profiles with a simple hack to userinfo.php:



If you want to suppress only certain fields, you could use the same concept:

Very nice! Thanks.

Hi,

What Dave posted will _nearly_ answer my question (and concerns).

I would like to stop _anyone_ from doing this:

http://example.com/userinfo.php?uid=1

except of course if the user doing it was the 'webmaster'.

Having just installed an XOOPS for someone (#2 install, wooppee) , I setup the 'webmaster' person, and added a news article, only to see that then any anonymous user would be able to see _that_ username. :(

In general, I would like a method to be able to control the user levels to a degree where something like this happens.

1. No one at all could view user id=1 , unless they were that user, or a user on the same level.

2. Only 'webmaster' level users can view other 'webmaster' user info.

3. In general, users cannot view either user info, or posts by other users, unless they were at _least_ on that user level. That is, webmaster can do all, next level down (registered) can only view registered or anonymous,etc.

My objectives mostly are to protect the login username of any 'webmaster' level person. That would include a post anywhere (news, sections, forums,etc) by a webmaster, only another webmaster would be able to view the posts, or the persons info.

Hope I have made sense. For now, I have disabled just about everything on the website, even the news section, because the article was posted by a 'webmaster' type person.

Thanks,

Peter

Hi,

It looks like this thread:

https://xoops.org/modules/newbb/viewtopic.php?viewmode=flat&topic_id=17838&forum=20

might help a lot, as it discusses using the 'rank' which is basically what I want to do right throughout XOOPS.

If the rank is equal or lower, allow display of user info, otherwise no display allowed.

Peter

In userinfo.php, after $uid has been defined:



Re: allowing only webmasters to see content (in any module) posted by webmasters - I don't know if that's achievable without extensive changes. If your only objective to protect the login names of webmasters, the best solution is probably to avoid using webmaster logins for any posting; each webmaster can create a secondary, normal user account for posting. This is getting away from the topic of this thread, and you might want to start a new thread to discuss this.

----
Edit

Made minor correction to above code.

Hi,

Thanks Dave, I'll try that code out tomorrow.

Yes, I agree about trying to allow only webmasters to see content (in any module) may be very hard without extensive changes, and the sensible solution would be to apply our own 'rules', and not have webmasters post.

Thanks,

Peter