Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Show profile page history table conditionally #8902

Merged

Conversation

jimchamp
Copy link
Collaborator

@jimchamp jimchamp commented Mar 12, 2024

Closes #8905

When viewing a profile page, the history table will now only be rendered page owners and members of any of the following usergroups:
admin
librarians
super-librarians

Technical

Testing

While logged out:

  1. Visit as many profile pages as you like, ensuring that there is no history table at the bottom of the page.

While logged in with a non-admin account:

  1. Visit your account's profile page. Ensure that the history table is rendered.
  2. Visit any number of other profile pages. Ensure that the history table is not rendered.

While logged in with an admin or librarian account:

  1. Visit your account's profile page. Ensure that the history table is rendered.
  2. Visit any number of other profile pages. Ensure that the history table is rendered.

Screenshot

image
Desktop view when history table is not present

Stakeholders

When viewing a profile page, the history table will now only be rendered
for admins and page owners.
@mekarpeles mekarpeles self-assigned this Mar 14, 2024
@mekarpeles
Copy link
Member

After a short round of discussions, we want to include Librarians (who may deal w/ anti-spam) to see these tables also.

@mekarpeles
Copy link
Member

@jimchamp can we create an issue for this one to link against? On Tuesday we can do a quick check w/ community to make sure we're OK moving forward.

@mekarpeles mekarpeles added the Needs: Community Discussion This issue is to be brought up in the next community call. [managed] label Mar 14, 2024
@jimchamp jimchamp force-pushed the secure-profile-page-history-table branch from 699aa7f to 821262e Compare March 19, 2024 17:56
@mekarpeles mekarpeles removed the Needs: Community Discussion This issue is to be brought up in the next community call. [managed] label Apr 4, 2024
@mekarpeles mekarpeles merged commit e8be8d9 into internetarchive:master Apr 4, 2024
3 checks passed
Achorn pushed a commit to Achorn/openlibrary that referenced this pull request Apr 12, 2024
* Permit librarians, admins, super librarians to view history tables
* Show profile page history table conditionally

When viewing a profile page, the history table will now only be rendered
for librarians, admins, and page owners.

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
@jimchamp jimchamp deleted the secure-profile-page-history-table branch April 24, 2024 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Restrict visibility of history table on profile pages
2 participants