[Critical] Users can view other user email addresses on profiles

[Joel R]

Running latest 4.7.10

Recently imported a small IPB installation (dating back to 2004!)  

Something has changed with the membergroup or profile settings, which I cannot resolve. Users who are not moderators or administrators can view the email address on profiles.  

Steps to reproduce

1.  Login as a user in Member group.  

2.  Go to any other user profile.  You can view the email address

I've already checked membergroup settings and email settings, and could not find anything related to this.  

[Marc]

We would need to look further into this for you, however the access details on file appear to be incorrect or missing. Could you please update these details by visiting your client area, selecting the relevant purchase, then clicking "Review/Update Access Information" under the "Stored Access Information" section. 

We look forward to further assisting you. 

 

[Daniel F]

This is a moderator permission

[DawPi]

It has been fixed on the @Joel R board. 😉

[Marc]

2 hours ago, DawPi said:

It has been fixed on the @Joel R board. 😉

Fixed, or switched off?

[DawPi]

It was something else. Suddenly "normal" members group was added as a Moderators. I've removed them and everything back to normal.