Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
See http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki52#HEmailAddressObfuscation and http://jira.xwiki.org/browse/XWIKI-9224 . Thanks, Marius On Wed, Dec 4, 2013 at 12:03 PM, vinc...@massol.net vinc...@massol.net wrote: On 4 Dec 2013 at 10:45:35, Thomas Mortagne (thomas.morta...@xwiki.com) wrote: This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. The concept has been there for several years Thomas (it was even there when I joined the project AFAIR). But yes, it wasn’t exposed as a settings in the admin UI and it was hardcoded in our sheet before. Thanks -Vincent On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne thomas.morta...@xwiki.com: Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
Turning on obfuscated email through XWiki Administer Wiki Email Obfuscate Email Addresses = YES does not produce expect result. All emails are still visible in Wiki Home User Directory See: http://osi.xwiki.com/xwiki/bin/view/XWiki/TestOSIuser On 12/05/2013 05:41 AM, Marius Dumitru Florea wrote: See http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWiki52#HEmailAddressObfuscation and http://jira.xwiki.org/browse/XWIKI-9224 . Thanks, Marius On Wed, Dec 4, 2013 at 12:03 PM, vinc...@massol.net vinc...@massol.net wrote: On 4 Dec 2013 at 10:45:35, Thomas Mortagne (thomas.morta...@xwiki.com) wrote: This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. The concept has been there for several years Thomas (it was even there when I joined the project AFAIR). But yes, it wasn’t exposed as a settings in the admin UI and it was hardcoded in our sheet before. Thanks -Vincent On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne thomas.morta...@xwiki.com: Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- ||| | ||||| |||| ||| Patrick Masson General Manager, Director Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em: mass...@opensource.org mailto:mas...@opensource.org Ws: www.opensource.org http://www.opensource.org ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
Sending again as attachments exceeded size limits and my email was sent to moderation... Hmm, Well I set that to Yes (see attached: Admin:Email.png) and it does not obfuscate users' emails on their profile page (see attached: TestUser.png). Any ideas? Patrick On 12/04/2013 09:43 AM, Thomas Mortagne wrote: Yes that's the one. On Wed, Dec 4, 2013 at 3:39 PM, Patrick Massonmas...@opensource.org wrote: Is this were the setting is...? Administration ? Configuration ? Email Obfuscate Email Addresses This affects only the email addresses stored in object properties of type Email, as long as the default custom displayer for the Email property type is not overwritten. Example:a...@domain.org On 12/04/2013 04:45 AM, Thomas Mortagne wrote: This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardinharu_mamb...@mail.ru wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne thomas.morta...@xwiki.com: Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- ||| | ||||| |||| ||| Patrick Masson General Manager, Director Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em:mass...@opensource.org mailto:mas...@opensource.org Ws:www.opensource.org http://www.opensource.org ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- ||| | ||||| |||| ||| Patrick Masson General Manager, Director Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em: mass...@opensource.org mailto:mas...@opensource.org Ws: www.opensource.org http://www.opensource.org -- ||| | ||||| |||| ||| Patrick Masson General Manager, Director Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em: mass...@opensource.org mailto:mas...@opensource.org Ws: www.opensource.org http://www.opensource.org ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
Hi Patrick, On 5 Dec 2013 at 18:18:44, Patrick Masson (mas...@opensource.org(mailto://mas...@opensource.org)) wrote: Sending again as attachments exceeded size limits and my email was sent to moderation… I received it the first time! Hmm, Well I set that to Yes (see attached: Admin:Email.png) and it does not obfuscate users' emails on their profile page (see attached: TestUser.png”). Actually I enabled obsfucation on xwiki.org yesterday and it was working. But I checked today and it’s not working anymore either… Seems we have a bug. Would be great to report an issue in jira (http://jira.xwiki.org). Thanks -Vincent Any ideas? Patrick On 12/04/2013 09:43 AM, Thomas Mortagne wrote: Yes that's the one. On Wed, Dec 4, 2013 at 3:39 PM, Patrick Masson wrote: Is this were the setting is...? Administration ? Configuration ? Email Obfuscate Email Addresses This affects only the email addresses stored in object properties of type Email, as long as the default custom displayer for the Email property type is not overwritten. Example:a...@domain.org On 12/04/2013 04:45 AM, Thomas Mortagne wrote: This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne : Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
So here’s the story… There was indeed a regression introduced in 5.2 which was fixed in 5.2.2, see http://jira.xwiki.org/browse/XWIKI-9652 Your wiki is on 5.2.1 which is why you’re seeing the issue. I’m releasing 5.2.2 today. Thanks -Vincent On 5 Dec 2013 at 19:15:47, vinc...@massol.net (vinc...@massol.net(mailto://vinc...@massol.net)) wrote: Hi Patrick, On 5 Dec 2013 at 18:18:44, Patrick Masson (mas...@opensource.org(mailto://mas...@opensource.org)) wrote: Sending again as attachments exceeded size limits and my email was sent to moderation… I received it the first time! Hmm, Well I set that to Yes (see attached: Admin:Email.png) and it does not obfuscate users' emails on their profile page (see attached: TestUser.png”). Actually I enabled obsfucation on xwiki.org yesterday and it was working. But I checked today and it’s not working anymore either… Seems we have a bug. Would be great to report an issue in jira (http://jira.xwiki.org). Thanks -Vincent Any ideas? Patrick On 12/04/2013 09:43 AM, Thomas Mortagne wrote: Yes that's the one. On Wed, Dec 4, 2013 at 3:39 PM, Patrick Masson wrote: Is this were the setting is...? Administration ? Configuration ? Email Obfuscate Email Addresses This affects only the email addresses stored in object properties of type Email, as long as the default custom displayer for the Email property type is not overwritten. Example:a...@domain.org On 12/04/2013 04:45 AM, Thomas Mortagne wrote: This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne : Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
You can enable Obfuscate Email Addresses in your wiki administration. On Tue, Dec 3, 2013 at 11:45 PM, xrichard ldm...@gmail.com wrote: Hi, I have noticed on my user page at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)? URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username My account page on other Wiki (like on l10n.xxx) contains truncated e-mail address (the end of the email is hidden). regards, -- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-org-tp7588225.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
Hi, On 4 Dec 2013 at 09:02:02, Thomas Mortagne (thomas.morta...@xwiki.com) wrote: You can enable Obfuscate Email Addresses in your wiki administration. I’ve just enabled it for myxwiki.org, thanks for noticing Xavier! I think what happened is that we changed the default value for this setting. It used to be true by default and I think (but not sure) that we’ve changed it to true by default (I also remember I wasn’t quite in agreement with this but let is pass - Again conditional to me remembering correctly ;)). Thanks -Vincent On Tue, Dec 3, 2013 at 11:45 PM, xrichard ldm...@gmail.com wrote: Hi, I have noticed on my user page at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)? URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username My account page on other Wiki (like on l10n.xxx) contains truncated e-mail address (the end of the email is hidden). regards, -- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-org-tp7588225.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
And fixed for xwiki.org too… This behavior change was really not good since it broke existing sites… :( Thanks -Vincent On 4 Dec 2013 at 09:47:54, vinc...@massol.net (vinc...@massol.net) wrote: Hi, On 4 Dec 2013 at 09:02:02, Thomas Mortagne (thomas.morta...@xwiki.com) wrote: You can enable Obfuscate Email Addresses in your wiki administration. I’ve just enabled it for myxwiki.org, thanks for noticing Xavier! I think what happened is that we changed the default value for this setting. It used to be true by default and I think (but not sure) that we’ve changed it to true by default (I also remember I wasn’t quite in agreement with this but let is pass - Again conditional to me remembering correctly ;)). Thanks -Vincent On Tue, Dec 3, 2013 at 11:45 PM, xrichard ldm...@gmail.com wrote: Hi, I have noticed on my user page at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)? URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username My account page on other Wiki (like on l10n.xxx) contains truncated e-mail address (the end of the email is hidden). regards, -- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-org-tp7588225.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
Hi! +1 vote for making Email Obfuscation turned ON by deafult. Otherwise it causes abovementioned problems :( Среда, 4 декабря 2013, 9:50 +01:00 от vinc...@massol.net vinc...@massol.net: And fixed for xwiki.org too… This behavior change was really not good since it broke existing sites… :( Thanks -Vincent On 4 Dec 2013 at 09:47:54, vinc...@massol.net (vinc...@massol.net) wrote: Hi, On 4 Dec 2013 at 09:02:02, Thomas Mortagne (thomas.morta...@xwiki.com) wrote: You can enable Obfuscate Email Addresses in your wiki administration. I’ve just enabled it for myxwiki.org, thanks for noticing Xavier! I think what happened is that we changed the default value for this setting. It used to be true by default and I think (but not sure) that we’ve changed it to true by default (I also remember I wasn’t quite in agreement with this but let is pass - Again conditional to me remembering correctly ;)). Thanks -Vincent On Tue, Dec 3, 2013 at 11:45 PM, xrichard ldm...@gmail.com wrote: Hi, I have noticed on my user page at myxwiki.org that my e-mail address (used for watchlist notifications) is viewable by anyone / anonymous ... how can I changed this (I'm afraided by potential spams)? URL where e-mail are displayed: http://www.myxwiki.org/xwiki/bin/view/XWiki/username My account page on other Wiki (like on l10n.xxx) contains truncated e-mail address (the end of the email is hidden). regards, -- View this message in context: http://xwiki.475771.n2.nabble.com/Everyone-can-see-user-s-e-mail-on-myxwiki-org-tp7588225.html Sent from the XWiki- Users mailing list archive at Nabble.com. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne thomas.morta...@xwiki.com: Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne thomas.morta...@xwiki.com: Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
On 4 Dec 2013 at 10:45:35, Thomas Mortagne (thomas.morta...@xwiki.com) wrote: This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. The concept has been there for several years Thomas (it was even there when I joined the project AFAIR). But yes, it wasn’t exposed as a settings in the admin UI and it was hardcoded in our sheet before. Thanks -Vincent On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne thomas.morta...@xwiki.com: Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
Is this were the setting is...? Administration ? Configuration ? Email Obfuscate Email Addresses This affects only the email addresses stored in object properties of type Email, as long as the default custom displayer for the Email property type is not overwritten. Example: a...@domain.org On 12/04/2013 04:45 AM, Thomas Mortagne wrote: This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne thomas.morta...@xwiki.com: Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- ||| | ||||| |||| ||| Patrick Masson General Manager, Director Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em: mass...@opensource.org mailto:mas...@opensource.org Ws: www.opensource.org http://www.opensource.org ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Everyone can see user's e-mail on myxwiki.org
Yes that's the one. On Wed, Dec 4, 2013 at 3:39 PM, Patrick Masson mas...@opensource.org wrote: Is this were the setting is...? Administration ? Configuration ? Email Obfuscate Email Addresses This affects only the email addresses stored in object properties of type Email, as long as the default custom displayer for the Email property type is not overwritten. Example: a...@domain.org On 12/04/2013 04:45 AM, Thomas Mortagne wrote: This is true only for a 5.1 - 5.2 upgrade since before 5.1 there was not even any concept of obfuscated email and it's been made configurable and turned off by default in 5.2. On Wed, Dec 4, 2013 at 10:42 AM, Dmitry Bakbardin haru_mamb...@mail.ru wrote: In this case it is logic turn it off for intranet sites. But imagine the situation, when you make an Upgrade and then realize that all e-mails are public :-) Next bot search make you database open for everyone? Looks problematic, isn't it? Среда, 4 декабря 2013, 10:38 +01:00 от Thomas Mortagne thomas.morta...@xwiki.com: Note that this option also obfuscate emails for logged in users and not only guests (which is a pain in an intranet since it make pretty much impossible to find the mail of another user). Kind regards, Dmitry ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- ||| | ||||| |||| ||| Patrick Masson General Manager, Director Secretary to the Board Open Source Initiative 855 El Camino Real, Ste 13A, #270 Palo Alto, CA 94301 United States Sk: massonpj Ph: (970) 4MASSON Em: mass...@opensource.org mailto:mas...@opensource.org Ws: www.opensource.org http://www.opensource.org ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Thomas Mortagne ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
