Everyone can see users IP's in a tab provided at /user regardless of their role or even of it they're logged in or not, I don't think this is right.

Comments

Liam McDermott’s picture

Liam McDermott CreditAttribution: Liam McDermott commented

Yes, that doesn't sound right, it's been a while since I touched this module however! If I remember correctly the IP address tab is provided by a View, if you go to the list of Views in the admin area the IP address view should be one of them. From there it should be possible to disable the IP address View.

Really, I thought the View was protected by a permission but I could be wrong.

v8powerage’s picture

v8powerage CreditAttribution: v8powerage commented

Ok Thanks, in Filters I added User role or admin, moderator this seems to do the trick I reckon it should be added as a patch.