11 Aug
2014
11 Aug
'14
1:13 p.m.
Hi There,
I’ve noticed that an XWiki installation has its user directory as well as full user
profiles openly accessible to the public.
Is this not a huge security risk? Or am I missing a configuration setting somewhere?
For example, http://www.xwiki.com has all its users publicly accessible here:
http://www.xwiki.com/lang/en/Main/UserDirectory and each user’s complete personal profile
details is viewable.
Is there a way to secure this information?
Thanks,
Werner