CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Developer Discussion (Moderator: Donald Lobo) »
  • Public profile fields, directories and 'view profile' in Wordpress
Pages: [1]

Author Topic: Public profile fields, directories and 'view profile' in Wordpress  (Read 656 times)

CiviTeacher.com

  • I live on this forum
  • *****
  • Posts: 1282
  • Karma: 118
    • CiviTeacher
  • CiviCRM version: 3.4 - 4.5
  • CMS version: Drupal 6&7, Wordpress
  • MySQL version: 5.1 - 5.5
  • PHP version: 5.2 - 5.4
Public profile fields, directories and 'view profile' in Wordpress
April 16, 2012, 05:12:03 am
Here are some things I noticed while messing around with Profiles and Wordpress:

1. Anonymous users don't have the 'view profiles' permission in Wordpress
2. It appears that the two default profiles that ship with Civi new installs:
   a. "Name and Address" profile no longer contains public fields (which is good)
   b. "Supporter Profile" also contains no public fields (good)
3. It appears that unless someone explicitly marks at least one field in a profile as both public and 'result column' that the profile will show no results, for instance this profile City has been marked as 'results'.
4. ACLs in Civi are not yet implemented for Wordpress integrations

Given that the above 4 things are now true in 4.1, is there any reason not to allow anonymous users in Wordpress the 'view profiles' permission?   WHY, you may ask...  If we don't allow 'view profiles', there is no way a profile directory could be created in Wordpress and shown publicly.

Questions, feedback, and concerns are welcome.
« Last Edit: April 16, 2012, 05:17:40 am by Stoob »
Try CiviTeacher: the online video tutorial CiviCRM learning library.

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: Public profile fields, directories and 'view profile' in Wordpress
April 16, 2012, 09:54:57 am

profiles by default are dangerous, very dangerous :( Hence adding the below by default is definitely not a good idea, IMHO

profiles can expose all the data on your website depending on various permissions and visibility settings. Hence we split that permissioning into much more granular permissions a couple releases back

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Developer Discussion (Moderator: Donald Lobo) »
  • Public profile fields, directories and 'view profile' in Wordpress

This forum was archived on 2017-11-26.