Hi, On 20 Dec 2013 at 17:41:45, Matthias Albert (matthias.albert@gmx.de(mailto://matthias.albert@gmx.de)) wrote:

We are using XWiki 5.2.1. One problem is, that every unregistered user can view the profile pages of all registered useres.

I tried the following: In the XWiki space, I managed to prevent unregistered users to view any page of the XWiki space. This removed the mentioned problem.

But then two other problems occured: unregistered users cannot see the logo in the top-left corner, and they cannot see the tag-cloud macro contents, which is signalled by an red-coloured error message.

Are there any solve theses problems?

Not easily. Each page can have its own right so you could protect each user profile page. But I agree it’s a bit of a pain.  You could also script it in order to do that at once. The algorithm would be: - find all documents having a XWikiUsers objects attached to it - verify the rights for the page and if the page isn’t protected, set the rights on it In the future, our goal is to have one space dedicated to the user pages so it would be extra easy to just protect that space. Thanks -Vincent