diff --git a/admin_manual/configuration_user/profile_configuration.rst b/admin_manual/configuration_user/profile_configuration.rst index ed74315e5..48c222617 100644 --- a/admin_manual/configuration_user/profile_configuration.rst +++ b/admin_manual/configuration_user/profile_configuration.rst @@ -13,15 +13,20 @@ disable profile globally to remove all profile functionality. Profile properties are also written into the :ref:`system address book`. +.. note:: If not disabled, the profile is publicly visible. + The visibility of the individual profile attributes can be either controlled + by the assigned visibility scopes (e.g. "Private" will disable public access), + or by the user defined profile visibility. + +Configuration +------------- + To enable or disable profile by default for new users switch the toggle in Basic settings under the Administration settings section. .. figure:: ../images/profile_default_setting.png -.. note:: If you are upgrading from Nextcloud 22 to 23 and want profile to - be disabled by default for all users, you may run the ``occ`` command below - before upgrading or upgrade first then switch the toggle in Basic settings - before letting any users log in. +You may also run the ``occ`` command below instead to change the default to ``false``: :: diff --git a/user_manual/images/userdata-visibility-toggle.png b/user_manual/images/userdata-visibility-toggle.png new file mode 100644 index 000000000..143e66f49 Binary files /dev/null and b/user_manual/images/userdata-visibility-toggle.png differ diff --git a/user_manual/images/userdata-visibility.png b/user_manual/images/userdata-visibility.png new file mode 100644 index 000000000..b58d9e023 Binary files /dev/null and b/user_manual/images/userdata-visibility.png differ diff --git a/user_manual/userpreferences.rst b/user_manual/userpreferences.rst index f332dfe3e..92cc24ae6 100644 --- a/user_manual/userpreferences.rst +++ b/user_manual/userpreferences.rst @@ -69,3 +69,25 @@ If you set your data to **Federated**, the trusted server(s) which are added by If you set your data to **Global**, anyone can see your data. For some use cases this is wanted. Someone with a public facing role such as marketing or sales might want to share their contact with a wide variety of connections which might not be using Nextcloud. + +Restrict who can see your profile data +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +If the profile is enabled by your administrator, then your profile data can be read by other users and guest. +To control who can see which information you can adjust the scopes already mentioned: + +* **Private** will only allow you and users you have added to your phone book to see the data +* **Local** and above will also allow guests to see your data + +To restrict the visibility even more you can disable guest from seeing your profile data by changing the profile visibility to logged-in users. +On the personal settings you can find the button for profile visibility: + + .. figure:: images/userdata-visibility-toggle.png + :figwidth: 50 % + :alt: screenshot of the profile visibility button in personal settings + + +Which allows to configure the visibility for each profile attribute: + + .. figure:: images/userdata-visibility.png + :alt: screenshot of scope dropdown on personal information form field