Added by Miguel Angel over 5 years ago
Our security department has a complain regarding the fact that in our Redmine instalation user porfiles are public, and anyone can obtain all the profiles with the url ej https://[host]/redmine/users/[number].
My question is, Is there a way to hide users and prevent this form happening ?
Thanks in adevance.
BR.
Miguel Ángel.
Change "Users visibility" setting from "All active users" to "Member of visible projects" for all roles.