-
Notifications
You must be signed in to change notification settings - Fork 891
Limit member visibility for non-admins #4318
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
I definitely see the merit of this feature. When we run workshops or have demo environments we may not want all emails to be public! We are adding groups support in #4235 including a global "Everyone" group. Perhaps each group (including "Everyone") could have a Alternatively, we could restrict the page and API routes for admins only. As a user, I will want to know what groups I'm in, but not necessarily who the other users are in the group/deployment. |
@ammario suggested doing this via an env variable to disable viewing users for all non-admins. I agree. |
If a user wants to see their groups, that should be in their profile. Re-using an Admin tab like Users is not an enterprise good look IMO even if it's read-only. |
Maybe a user should be able to view his own groups and the other members in the same groups at maiximum. |
Any plans for these guys? No one should be able to view all the other members except the user admin or owner. |
I think it's a fine default that regular users can't see everyone. I don't think we should add an additional configuration knob yet. |
But the regular users withy a member role can see everyone on the latest version. |
Yep. Closing in favor of #5002 |
For now, a non-admin user can see a full list of all coder users, their roles, emails, and last used time.
The text was updated successfully, but these errors were encountered: