Vote #73103
完了Display user's groups on profile
0%
説明
When I go to My account page, I would like to be able to see which groups I am a member of:
http://demo.redmine.org/my/account
The listed groups should link to their individual group pages. This would require a fix for Bug #12795 (Non-admin users cannot get info about groups).
journals
This is a very important feature, especially when you have a huge number of users.
--------------------------------------------------------------------------------
Hello,
there is a workaround for this. If for example you want to get to know the members of the group A, create a test ticket and assign it to the group A, then you will receive a notification by mail and you will get all the users in that particular group.
Hope that helps.
Best Regards
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Here is a patch that adds to the user profile page the groups in which the user is a member of.
If the current user is admin, the group name links to edit group membership page from administration, otherwise, it is just the group name. if the future, we can easily extend the link_to_group method to point to a group profile page and implement #12795.
Admin:
!{width:70%; border: 1px solid grey;}admin.png!
Non admin user:
!{width:70%; border: 1px solid grey;}non-admin.png!
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
The patch written by Marius BALTEANU shows all the groups which the user belongs appears on the user's profile page, but I wondered it may cause security problems.
Group names include important information such as organization names, product names, service names. Those names may not want to be seen by anyone except members of a particular project.
In order to avoid sensitive information is unintentionally disclosed to all users, I suggest that group visibility follow the same settings as the role's users visibility.
What to say when users visibility setting is set to "Members of visible projects", the current user should able to see groups only when the current user is a member of the project.
--------------------------------------------------------------------------------
Hinako Tajima wrote:
> The patch written by Marius BALTEANU shows all the groups which the user belongs appears on the user's profile page, but I wondered it may cause security problems.
>
> Group names include important information such as organization names, product names, service names. Those names may not want to be seen by anyone except members of a particular project.
>
> In order to avoid sensitive information is unintentionally disclosed to all users, I suggest that group visibility follow the same settings as the role's users visibility.
> What to say when users visibility setting is set to "Members of visible projects", the current user should able to see groups only when the current user is a member of the project.
I'm not sure that I fully understand your proposal. My proposed patch just adds to the user profile page the user's groups. If the current user has rights to see the profile page (login, first name, last name, custom fields, etc) of another user (based on his role permissions), it'll see also the groups. I think we complicate too much if we try to show only the groups that contain members of his visible projects (if this is the request).
--------------------------------------------------------------------------------
I understand the issue. The request was about viewing its own groups so a safer solution is to display the groups for administrators and the current user only. I've updated Marius' patch accordingly, thanks.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
related_issues
relates,Closed,12795,View group members by non-admin users