Ability to hide all users on viewAdministrators.action

XMLWordPrintable

    • Severity 3 - Minor
    • 1

      Some customers require a high level of security/privacy for their users. At this time, an anonymous or non-logged in user can visitviewAdministrators.action and review contact details.

      While there is the current ability to hide the associated user information such as IM groups and email, this will still leave a list of user names.

      An improvement for Bamboo will to be to allow the hiding of all information on this page, or, enable this page to be disabled completely or redirected.

      Workaround

      1. Edit <bamboo install dir>/atlassian-bamboo/WEB-INF/classes/struts.xml
      2. Look for action name="viewAdministrators"
      3. Comment out the whole block:
        <!--     <action name="viewAdministrators" class="com.atlassian.bamboo.ww2.actions.admin.user.ViewAdministrators">
              <result name="success" type="freemarker">/admin/user/viewAdministrators.ftl</result>
            </action> -->
        
      4. Restart Bamboo

      Visiting viewAdministrators.action will result in a Page Not Found error.

              Assignee:
              Adam Slaski (Inactive)
              Reporter:
              Neil Hickey (Inactive)
              Votes:
              7 Vote for this issue
              Watchers:
              16 Start watching this issue

                Created:
                Updated:
                Resolved: