One of our users discovered that with a simple google search all user profiles are accessible form ouside for non registewred users:
How can I fix this?
Some mor information:
This is XWIKI 15.10.1 (latest update)
We have some pages visible outside for guests (non registered users) and some pages only for registered users.
Users’ profiles are available by default. If you want to avoid getting them crawled by search engines, the issue could be reduced to disable/setting search engine indexing. Perhaps this could help:
If you want to hide them to Guest, then you need to add XWiki rights to each profile. I don’t know any way of getting that for all already created users, but you could always use XWiki advanced scripting features to detect any XWiki page holding a XWikiUsers object users, a.k.a. and user profile, and add XWikiRights to get what you want.
Hope this helps!
Can’t help with crawling, as out instance is on a private network.
For the other question, have a look here: https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Access%20Rights/ I guess the available setting should help you there.
I used this to solve it
1 Like
Interesting, thanks.
So your wiki in publicly / anonymously readable?
Yes, https://wiki.makerspacebonn.de (sorry in German).
Some pages are public the others only for the members of our makerspace.
1 Like