community.atlassian.com does not respect the privacy setting within identity in regards to profile photos

XMLWordPrintable

    • 1
    • Severity 3 - Minor

      Issue Summary

      Community does not yet have a good way to correctly honor the profile picture privacy settings that can be set on https://id.atlassian.com/manage-profile/profile-and-visibility

      Steps to Reproduce

      1. In https://id.atlassian.com/manage-profile/profile-and-visibility
      2. Upload a profile picture
      3. For the field of "Who can see your profile photo?" choose an option such as "Only my Organization" (this requires a managed Atlassian account, it's not something you can replicate with a gmail address account which is unmanaged).
      4. Go to community, check your profile or look at any post you have created on the site

      Expected Results

      End user expects that their photo would not be visible to anonymous users or users outside their org.

      Actual Results

      Community shows this photo to everyone, regardless if they are in your org or not.

      Workaround

      1. Delete Profile Avatar Image
      2. Privacy settings Default to “Anyone”
      3. Wait 15 minutes for synchronization between Identity and Community to occur
      4. Set profile to “Create Initials Avatar”
      5. Set Profile Privacy setting to [Company Name]
      6. Wait 15 minutes for synchronization between Identity and Community to occur
      7. Upload a new Avatar Image
      8. Set Privacy to [Company Name] only
      9. Wait 15 minutes for synchronization between Identity and Community to occur

            Assignee:
            Isaac Nelson (Inactive)
            Reporter:
            Jairo Ortiz
            Votes:
            1 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: