User attribute display and permission settings ignored

Permalink 0 0 Browser Info Environment
I want to hide some of the default user attributes from my clients since we’re not using private messaging or displaying user profiles. So I un-checked the “Editable in Profile.” in the attribute settings (see attribute-settings.png).

But that attribute still shows up when I’m logged in as a non-superuser user that is in the Administrators group. I expected that attribute to NOT appear there (see edit-user.png).

I even went into User Permissions and un-checked the unwanted attributes in the “Edit User Details” and “View User Attributes” panels (see edit-user-attributes.png and view-user-attributes.png).

Still no change to the View/Edit User page (see edit-user.png). In addition that non-superuser user in the Administrator group could still edit the user attributes that they don't have permission for.

4 Attachments


Status: New
websanity

concrete5 Environment Information

# concrete5 Version
Core Version - 8.5.1
Version Installed - 8.5.1
Database Version - 20190301133300

# concrete5 Packages
None

# concrete5 Overrides
None

# concrete5 Cache Settings
Block Cache - Off
Overrides Cache - Off
Full Page Caching - Off
Full Page Cache Lifetime - Every 6 hours (default setting).

# Server Software
Apache/2.4.29 (Ubuntu)

# Server API
apache2handler

# PHP Version
7.2.15-0ubuntu0.18.04.2

# PHP Extensions
apache2handler, calendar, Core, ctype, curl, date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, json, libxml, mbstring, mcrypt, mysqli, mysqlnd, openssl, pcre, PDO, pdo_mysql, Phar, posix, readline, Reflection, session, shmop, SimpleXML, sockets, sodium, SPL, standard, sysvmsg, sysvsem, sysvshm, tokenizer, wddx, xml, xmlreader, xmlwriter, xsl, Zend OPcache, zip, zlib

# PHP Settings
max_execution_time - 30
log_errors_max_len - 1024
max_file_uploads - 20
max_input_nesting_level - 64
max_input_time - 60
max_input_vars - 1000
memory_limit - 128M
post_max_size - 8M
upload_max_filesize - 2M
mysqli.max_links - Unlimited
mysqli.max_persistent - Unlimited
pcre.backtrack_limit - 1000000
pcre.recursion_limit - 100000
session.cache_limiter - <i>no value</i>
session.gc_maxlifetime - 7200
opcache.max_accelerated_files - 10000
opcache.max_file_size - 0
opcache.max_wasted_percentage - 5

Browser User-Agent String

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:66.0) Gecko/20100101 Firefox/66.0