News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

Permission to restrict the use of Gravatar in profile

Started by @rjen, November 30, 2022, 10:16:07 AM

Previous topic - Next topic

@rjen

Question: in our forum we have made a difference between club members and visitors. This means that members that are club members have extra permissions that a registered memeber does not have.

One of those permission is the permission to choose an avatar.

After the upgrade to SMF2.1 I now notice that there is no way to restrict the use of gravatars using permissions. Though there are permissions for using avatars, there is no possibility to limit the use of Gavatars...

Is this an oversight, or am I missing something here?

Running SMF 2.1 with latest TinyPortal at www.fjr-club.nl

Kindred

by the very concept of Gravatar - if it exists, the associated account should have access to it....

so, limiting the use of gravatar seems counterproductive and AFAIK, there is not separate permission.
If the user can have an avatar and the admin has allowed gravatars, then they can use it.
not an oversight
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

@rjen

That's just the thing: we do NOT allow these users to use an avatar, yet the gravatar is showing.

You may find it counterproductive, but this is not logical...

So we should disable the gravatars alltogether then.
Running SMF 2.1 with latest TinyPortal at www.fjr-club.nl

Sir Osis of Liver

Haven't tested it, but looks like avatar settings for gravatars override group permissions.
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

shawnb61

I read the OP (and title...) like Kindred - that the request was for separate permissions for gravitars vs avatars...

Yes, avatar permissions should govern gravitars as well.  If confirmed, this is a bug.
Address the process rather than the outcome.  Then, the outcome becomes more likely.   - Fripp

@rjen

Well unfortunately there is no permission for that indicates that a membergroup is allowed avatars as such. The only available permissions are the one I listed in my post...

Select an avatar from the server      
Upload an avatar to the server      
Choose a remotely stored avatar

These are all disabled, but the Gravatar is still showing up in the member profile...

Not sure how my post was 'misunderstood' though...
Running SMF 2.1 with latest TinyPortal at www.fjr-club.nl

Kindred

Quote from: @rjen on November 30, 2022, 12:16:51 PMThat's just the thing: we do NOT allow these users to use an avatar, yet the gravatar is showing.


ah --- see, that was not clear from your original post
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

shawnb61

Address the process rather than the outcome.  Then, the outcome becomes more likely.   - Fripp

m4z

This sounds like it's also highly relevant in a GDPR context: if my privacy policy doesn't include Gravatar, but personal data (mail address, IP) is sent there, I'm potentially f'ed, no?
"Faith is what you have in things that don't exist."
--Homer Simpson

Es gibt hier im Forum ein deutsches Support-Board!

Aleksi "Lex" Kilpinen

Well, Gravatar still has a main setting to disable or enable, so GDPR-wise I'd think that is the setting to look at.
Still, it makes sense that there should be a permission as well, since all other avatar options have one too. Gravatar could perhaps be included in the "external avatars" permission?
Slava
Ukraini!
"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum. Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

How you can help SMF

shawnb61

Quote from: Aleksi "Lex" Kilpinen on December 01, 2022, 04:22:26 PMGravatar could perhaps be included in the "external avatars" permission?

Makes sense to me...
Address the process rather than the outcome.  Then, the outcome becomes more likely.   - Fripp

m4z

Quote from: Aleksi "Lex" Kilpinen on December 01, 2022, 04:22:26 PMWell, Gravatar still has a main setting to disable or enable, so GDPR-wise I'd think that is the setting to look at.

Quote from: @rjen on November 30, 2022, 12:16:51 PMThat's just the thing: we do NOT allow these users to use an avatar, yet the gravatar is showing.

Ok, contrived example, but: Assume a forum where the admin doesn't allow any user to use avatars. I'd understand if the admin could be of the impression that allowing no avatars at all to anybody would automatically exclude gravatars from showing up, even if gravatars still are enabled.
"Faith is what you have in things that don't exist."
--Homer Simpson

Es gibt hier im Forum ein deutsches Support-Board!

Aleksi "Lex" Kilpinen

From the top of my head, I'm not sure if Gravatars are enabled by default or not, but I'd sort of expect not as it's a 3rd party service. So ending up in that situation would mean having to explicitly enable Gravatars first. This could be good to check though. Including it in the outside avatar permissions would fix the visible issue of still showing Gravatars in that situation as well though.
Slava
Ukraini!
"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum. Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

How you can help SMF

Sir Osis of Liver

Gravatars are enabled by default, that should not override group permissions.  Part of the problem is they're in two different places in ACP, so it's not obvious what the current settings are.
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

Aleksi "Lex" Kilpinen

Quote from: shawnb61 on December 01, 2022, 04:25:49 PM
Quote from: Aleksi "Lex" Kilpinen on December 01, 2022, 04:22:26 PMGravatar could perhaps be included in the "external avatars" permission?

Makes sense to me...
After a little more thought, actually I would say a dedicated permission would be better.
Allowing outside avatars would allow using any outside source, where as Gravatars actually have age ratings and stuff that you can control - so allowing just any outside avatars probably shouldn't be required for Gravatar usage.
Slava
Ukraini!
"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum. Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

How you can help SMF

Advertisement: