Osama Sayegh 976aca68f6 FEATURE: Restrict profile visibility of low-trust users (#29981) ... We've seen in some communities abuse of user profile where bios and other fields are used in malicious ways, such as malware distribution. A common pattern between all the abuse cases we've seen is that the malicious actors tend to have 0 posts and have a low trust level. To eliminate this abuse vector, or at least make it much less effective, we're making the following changes to user profiles: 1. Anonymous, TL0 and TL1 users cannot see any user profiles for users with 0 posts except for staff users 2. Anonymous and TL0 users can only see profiles of TL1 users and above Users can always see their own profile, and they can still hide their profiles via the "Hide my public profile" preference. Staff can always see any user's profile. Internal topic: t/142853.		2024-12-09 13:07:59 +03:00
..
concerns	UX: Split hide_profile_and_presence user option (#29632)	2024-11-12 22:22:58 -03:00
about_serializer_spec.rb	DEV: Resolve stat registration flaky tests (#29084)	2024-10-04 13:49:22 +01:00
admin_plugin_serializer_spec.rb	FIX: Plugin JS failing to load would break admin interface (#29139)	2024-10-11 09:26:10 +10:00
admin_user_action_serializer_spec.rb
admin_user_list_serializer_spec.rb	FEATURE: Add bulk destroy to admin users list (#29744)	2024-11-25 11:13:35 +03:00
basic_group_serializer_spec.rb
basic_group_user_serializer_spec.rb
basic_post_serializer_spec.rb
basic_reviewable_flagged_post_serializer_spec.rb
basic_reviewable_queued_post_serializer_spec.rb
basic_reviewable_serializer_spec.rb
basic_reviewable_user_serializer_spec.rb
basic_user_serializer_spec.rb
category_detailed_serializer_spec.rb
category_serializer_spec.rb	FEATURE: Support designating multiple groups as mods on category (#28655)	2024-09-04 04:38:46 +03:00
category_upload_serializer_spec.rb
current_user_serializer_spec.rb	DEV: Use serializers for user_notification_schedule and featured_topic (#27719)	2024-07-05 00:00:24 -03:00
detailed_user_badge_serializer_spec.rb
directory_item_serializer_spec.rb	FEATURE: Add links to searchable user fields in users directory and user profile (#29338)	2024-11-06 13:35:30 -04:00
emoji_serializer_spec.rb	FEATURE - Add username column to custom emoji table (#29522)	2024-11-01 10:32:59 -05:00
flag_serializer_spec.rb	FIX: Flaky flags spec (#28591)	2024-08-28 17:03:43 +10:00
found_user_serializer_spec.rb
group_show_serializer_spec.rb
group_user_serializer_spec.rb
group_user_with_custom_fields_serializer_spec.rb
invite_serializer_spec.rb
listable_topic_serializer_spec.rb
new_post_result_serializer_spec.rb
notification_serializer_spec.rb
pending_post_serializer_spec.rb
post_action_type_serializer_spec.rb	FIX: Return properly interpolated translations for flag types	2024-07-30 18:30:57 +02:00
post_revision_serializer_spec.rb	FIX: Don’t try to serialize associations in PostRevisionSerializer	2024-11-06 10:38:41 +01:00
post_serializer_spec.rb	FEATURE: Show when a badge has been granted for a post (#29696)	2024-12-03 13:43:27 +11:00
poster_serializer_spec.rb
remote_theme_serializer_spec.rb	FIX: Hide broken theme about/license URLs (#29930)	2024-11-26 13:53:10 +10:00
reviewable_flagged_post_serializer_spec.rb
reviewable_queued_post_serializer_spec.rb
reviewable_score_serializer_spec.rb	FEATURE: Allow completely custom score reasons. (#28348)	2024-08-14 15:53:59 -03:00
reviewable_serializer_spec.rb
reviewable_user_serializer_spec.rb	SECURITY: Update reviewable user serializer payload	2024-07-03 20:49:19 +08:00
single_sign_on_record_serializer_spec.rb
site_serializer_spec.rb	DEV: Block accidental serialization of entire AR models (#27668)	2024-07-01 17:08:48 -03:00
suggested_topic_serializer_spec.rb
tag_group_serializer_spec.rb
tag_serializer_spec.rb
theme_objects_setting_metadata_serializer_spec.rb	DEV: Remove experimental_objects_type_for_theme_settings site setting (#26507)	2024-04-04 12:01:31 +08:00
theme_serializer_spec.rb	FEATURE: Allow themes to define screenshots (#29079)	2024-10-28 10:10:20 +10:00
theme_settings_serializer_spec.rb	DEV: Remove experimental_objects_type_for_theme_settings site setting (#26507)	2024-04-04 12:01:31 +08:00
topic_link_serializer_spec.rb
topic_list_item_serializer_spec.rb
topic_list_serializer_spec.rb	DEV: Set topic list filter name in serializer for children (#29291)	2024-10-18 17:24:47 -03:00
topic_tracking_state_item_serializer_spec.rb
topic_tracking_state_serializer_spec.rb
topic_view_details_serializer_spec.rb	DEV: Make all admins TL4 in tests (#25435)	2024-03-26 11:41:12 +08:00
topic_view_posts_serializer_spec.rb
topic_view_serializer_spec.rb	DEV: Call Discourse.redis.flushdb after the end of each test (#29117)	2024-10-09 07:19:31 +08:00
upload_serializer_spec.rb
user_auth_token_serializer_spec.rb
user_badge_serializer_spec.rb
user_bookmark_list_serializer_spec.rb	FIX: Serialize categories for bookmarks (#26606)	2024-04-17 17:23:47 +03:00
user_card_serializer_spec.rb	DEV: Use serializers for user_notification_schedule and featured_topic (#27719)	2024-07-05 00:00:24 -03:00
user_notification_total_serializer_spec.rb
user_post_bookmark_serializer_spec.rb
user_serializer_spec.rb	FEATURE: Restrict profile visibility of low-trust users (#29981)	2024-12-09 13:07:59 +03:00
user_status_serializer_spec.rb
user_summary_serializer_spec.rb
user_with_custom_fields_serializer_spec.rb
web_hook_post_serializer_spec.rb
web_hook_topic_view_serializer_spec.rb
web_hook_user_serializer_spec.rb	DEV: use new 'ignore allowed groups' site settings (#27670)	2024-07-04 19:27:26 +02:00
wizard_serializer_spec.rb	DEV: Update member access wizard step to use toggle group (#28013)	2024-07-29 14:07:06 +08:00