From 8c09a040ddf9c95545659ee0f17304932ea3dd87 Mon Sep 17 00:00:00 2001
From: tobes <toby.junk@gmail.com>
Date: Fri, 9 Nov 2012 13:48:34 +0000
Subject: [PATCH] [#3012] Do not show apikey for unauthorized users

---
 ckan/templates/user/read.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ckan/templates/user/read.html b/ckan/templates/user/read.html
index 5b6923ce567..dd24d63f0ef 100644
--- a/ckan/templates/user/read.html
+++ b/ckan/templates/user/read.html
@@ -107,7 +107,7 @@ <h1 class="heading">{{ user.fullname or _('No full name provided') }}</h1>
         <dt>{{ _('Member Since') }}</dt>
         <dd>{{ h.render_datetime(user.created) }}</dd>
       </dl>
-      {% if c.is_myself %}
+      {% if c.is_myself and (not g.authorized_users_only or user.authorized) %}
       <dl>
         <dt class="key">{{ _('API Key') }} <span class="label" title="{{ _('This means only you can see this') }}">{{ _('Private') }}</span></dt>
         <dd class="value"><code>{{ user.apikey }}</code></dd>