Hi,

For privacy reasons, I don't want user A to see what user B is trading with who and for how much.

Is it possible to hide other members transactions and pending transactions but still allow a user to see his/her own transactions and pending transaction?

If I remove the "view all transactions" to authenticated users, then a user cannot see his / her own pending transactions any more.

thanks for your help

Olivier

Comments

matslats’s picture

matslats commented
Status: Active » Postponed (maintainer needs more info)

that would be a bug.
It's not a scenario which has been tested.
Can you clarify that only pending transactions are affected?
When do you need it fixed by?

oriche’s picture

oriche commented

Thanks for answer.

I have played a bit with the permissions and I cannot make the bug happen any more.

Still, I would like to know how to prevent a user from viewing other members transactions and pending transactions.

Even if I remove the permission "access user profiles" and "view all transactions", it is still possible for a user to access other people's profile page and have a look at the "Income and outgoings" and "pending" tabs.

I think one user should only be able to access another user's email contact page and balance, the rest should be private.

what do you think?

Thanks for your support

Olivier

matslats’s picture

matslats commented
Category: support » bug
Status: Postponed (maintainer needs more info) » Needs review

Ok Try HEAD now (that's the dev build);
In a few days there will be seperate permissions for 'view all transactions' and 'view all balances'.