View Issue Details

IDProjectCategoryView StatusLast Update
0000570XMB1New Featurespublic2020-10-19 09:04
Reporterlottos Assigned Tomiqrogroove  
PrioritylowSeverityfeatureReproducibilityN/A
Status closedResolutionwon't fix 
Target Version1.9.12 
Summary0000570: Who's Online: hyperlinks for members
DescriptionWho's Online:
- add an Admin setting that allows members to have the 'Location' listed in who's online as hyperlinks as they can view and then search anyway.
- not sure if admins and moderators should have their location activity shown or not?
TagsNo tags attached.
MySQL Version
PHP Version
Web Server
Browser
Flags
Original Reporter
SVN Revision

Activities

miqrogroove

2020-09-02 17:52

administrator   ~0000397

Need some clarification on this idea. Currently, if a guest views the misc.php?action=online page then the Location column is not linked. This is intentional and I believe it has some history with versions I've touched. If I go to the same page while logged in as a Super Admin, the location column is fully linked up. This is based on the X_STAFF privilege, so currently it won't show up for Members or Guests.

I'm not sure it's worth adding a setting for this. Are you interested in lowering the privilege from X_STAFF to X_MEMBER?

Staff and members and guests have traditionally shared the same appearance in the who's online page.

lottos

2020-09-02 17:55

updater   ~0000398

Yes, I think lowering the privilege from X_STAFF to X_MEMBER makes sense.

miqrogroove

2020-09-02 20:18

administrator   ~0000400

Okay. This will be changed or closed in this version pending more review. It's a complex feature and risky.

miqrogroove

2020-09-17 17:22

administrator   ~0000415

The feature, as laid out in the Description and earlier Notes, will not be included in 1.9.12. In brief, it is not currently possible to lower the Who's Online location privilege because there is not yet any code to care for the privacy and security of such information, to prevent it from being seen by unprivileged users. The existing code only goes so far as to prevent staff members from seeing information that is restricted to the Super Admin.

If you are still interested in this, I suggest narrowing the scope of the feature request. For example, if you only need members to see links to threads, this could be allowed by a single regex filter.

Issue History

Date Modified Username Field Change
2020-09-02 14:58 lottos New Issue
2020-09-02 15:08 lottos Description Updated
2020-09-02 17:52 miqrogroove Assigned To => miqrogroove
2020-09-02 17:52 miqrogroove Status new => feedback
2020-09-02 17:52 miqrogroove Note Added: 0000397
2020-09-02 17:55 lottos Note Added: 0000398
2020-09-02 17:55 lottos Status feedback => assigned
2020-09-02 20:18 miqrogroove Status assigned => acknowledged
2020-09-02 20:18 miqrogroove Target Version => 1.9.12
2020-09-02 20:18 miqrogroove Note Added: 0000400
2020-09-17 17:22 miqrogroove Status acknowledged => resolved
2020-09-17 17:22 miqrogroove Resolution open => won't fix
2020-09-17 17:22 miqrogroove Note Added: 0000415
2020-10-19 09:04 miqrogroove Status resolved => closed