When logged in as a user, I can click the “users” icon in the top right corner and see all other users on the server, even those not in current users group.
How can I disable this?
Of course, I want the users to be able to see the other users, which are in their group and be able to auto-complete names of users in their groups.
One possible solution is disable the App “Accessibility” but this won’t allow even to auto browse users belongs to your group.
Isn’t this a flagrant critical privacy issue?
How can Nextcloud display other users accounts, which could be their whole name, to other users of different companies?
Oh yes it is flagrant breach of user’s privacy and it falls perfectly under GDPR scope, so all the best.
And this is another example why NC should disappear.
Hello,
Where can I find this function in NC 16.0.4 ?
I do not speak German, so I can’t find where it is.
I want the same things, users in one group can only see other users in the same group in user list, contact proporsals, etc.
Thank you
JeLeB
I also wonder when this bug will be fixed or if there is a hack somehow
Has anyone an update, been quite a while… Got a report that this is still valid.
Does this post maybe help (It’s mentioning the same thing that @freumichCH has hinted at above - it’s in the sharing settings) Not sure if restricting sharing also has effects on general user visibility, but maybe worth a try?
I tried a quick search in the server bugtracker for an issue regarding this, but didn’t yet find anything; I’d recommend to do a thorough search there, maybe you find an according issue to which you could add your voice; if there’s nothing there yet, I would recommend you to submit a new issue there, so that the developers notice your need!
Edit: Also just found this other, older topic - there seems to be a way to disable autocomplete via config
Simply disable following Options in Settings → Sharing (https://FQDN/index.php/settings/admin/sharing):
Shouldn’t “different companies” have their own nextcloud instance?
Also check the switch “Restrict users to only share with users in their groups”, this way users will only be aware of users who are in the same groups as they are.
thanks all for the input! Fixed.
@Larry_Boyd Not really, you should be able to prevent user “groups” from seeing one another, it doesn’t matter if its a company or user-group, this ought to work to keep privacy on a high level.
Apart from that one might say its a best practice to isolate companies and i cannot agree more, if one has the resources. But either way should be entirely fine.
Can you tell us how you fixed it, for future users that might have the same problem?
I’m not believing it!
I made a TEST123 user to try access from smartphone web-browser.
This test user just need to tap on contacts and test user can view ALL people!
That can never ever be a default setting?
All the users I added today as admin even did not log into nextcloud until now, but are already visible to every minimal user account?
Under settings- sharing, I dont see a contact section. :((
Thanks for help.
v27.1.1
Found something under:
https://example.com/index.php/settings/admin/sharing
sound like “allow auto complete from user name…” solution uncheck it
But why its not possible to copy the text from admin website, to paste it here?
I think the problem is the group all_user. You can segregate users into different groups but there’s a group called all_user that contains all the users, so, everyone is in the same group at the end.
I’ve tried removing that group but it’s created over and over again.
