how to disable a normal user from seeing the list of users in liferay 7.0

RE: how to disable a normal user from seeing the list of users in liferay 7.0

2022-09-20T15:12:41Z

Hi all, I am facing the same issue in Liferay 7.0. I've tried the configuration posted by @fer ros in portal-ext.properties but not working.

Also it seems that the problem does not come from having the Power user assigned, since removing it a normal user can still have access to the user list.

Any help is welcome

RE: how to disable a normal user from seeing the list of users in liferay 7

2020-07-06T21:55:21Z

A normal User is not allowed to see the other site membership,
In this case check the roles assigned to this user, This user should has only the user role
if you find that the user has also a Power User role in this case be sure that this power user role is causing the issue. plz check the roles by userId in the liferay database side.

RE: how to disable a normal user from seeing the list of users in liferay 7

2020-07-06T15:16:56Z

Sorry, I can't reproduce on 7.2 (DXP, but not even the latest fixpack).
Maybe it's a bug that's long been fixed?

RE: how to disable a normal user from seeing the list of users in liferay 7

2020-07-06T14:29:19Z

Olaf Kock:

Which version?

7.0 -ga5

RE: how to disable a normal user from seeing the list of users in liferay 7

2020-07-06T14:07:11Z

Which version?

RE: how to disable a normal user from seeing the list of users in liferay 7

2020-07-06T14:03:59Z

attached is as I see it when a normal user types the url mentioned in the question

RE: how to disable a normal user from seeing the list of users in liferay 7

2020-07-06T13:15:58Z

Olaf Kock:

fer ros:

by accessing via url a normal user can see the list of users who are part of the instance even if he cannot do anything, but I would not want any user to have access to this list

Do you see a list of users? I see the current user's account, as the MyAccountPortlet suggests.

a normal user does not have access to the portal from the graphical interface ... but if he enters the url indicated in the question, unfortunately any user can see the list of all users who are registered on the specific instance

RE: how to disable a normal user from seeing the list of users in liferay 7

2020-07-06T10:34:37Z

fer ros:

by accessing via url a normal user can see the list of users who are part of the instance even if he cannot do anything, but I would not want any user to have access to this list

Do you see a list of users? I see the current user's account, as the MyAccountPortlet suggests.

how to disable a normal user from seeing the list of users in liferay 7.0

2020-07-06T07:41:58Z

by accessing via url a normal user can see the list of users who are part of the instance even if he cannot do anything, but I would not want any user to have access to this list through the following link:
https://urlInstance/group/control_panel/manage?p_p_id=com_liferay_my_account_web_portlet_MyAccountPortlet&p_p_lifecycle=1&p_p_state=maximized&p_p_mode=view&_com_liferay_my_account_web_portlet_MyAccountPortlet_javax.portlet.action=%2Fusers_admin%2Fedit_user&p_p_auth=ncrtGfLpis there any property to set or some permission to modify? I tried setting the following properties in the portal-ext.properties but nothing:

sites.control.panel.members.visible = false
user.groups.search.with.index=false
users.list.views= (empty)