From 38aeed85b5845a2a4e7a26d8e39488b79dce3947 Mon Sep 17 00:00:00 2001 From: "Mr. Senko" Date: Sat, 22 Aug 2020 23:04:07 +0300 Subject: [PATCH] Document auth.view_user permission. Refs #1685 --- docs/source/admin.rst | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/docs/source/admin.rst b/docs/source/admin.rst index 6c7fa32e09..b27e312fa2 100644 --- a/docs/source/admin.rst +++ b/docs/source/admin.rst @@ -68,6 +68,19 @@ permissions. individual users too! It is recommended to use groups for permissions management. +.. warning:: + + Kiwi TCMS requires the ``auth.view_user`` permission in order to display + read-only information on user profile pages! This permission is + not granted by default because the profile page contains personal + information like names and email address. + + Administrators can grant this + on individual or group level if access to such information is considered + acceptable. + + .. versionadded:: 8.6 + Groups ~~~~~~