For private profiles, hide all profile information from logged-out users
authorAaron Wells <aaronw@catalyst.net.nz>
Tue, 20 Aug 2013 07:02:19 +0000 (19:02 +1200)
committerSon Nguyen <son.nguyen@catalyst.net.nz>
Wed, 2 Oct 2013 17:05:44 +0000 (06:05 +1300)
commit6490dda900d252c885c8ca201340af0fb3dc4b24
tree833cb69a3e0b6483953b69414bcd90db90bde614
parentf5cebdef3477c346d98959090937a8d49361fa84
For private profiles, hide all profile information from logged-out users

Bug1158625: If the user hasn't made their profile public, don't even show their pic and name
to logged-out users.

And in order to prevent enumeration attacks, show the same access denied screen to a
logged-out user, whether they hit the URL for an exising profile or whether they entered
an invalid URL.

Change-Id: Ic926fde3e04a59728868fffecc9272136fb83855
htdocs/user/view.php