Skip to content

Private Profiles leaking certain info

@mdewji over at #244275 (closed) noticed that we're leaking some other user profile info for people with private profiles:

  • groupMemberships
  • projectMemberships
  • starredProjects (this one is also being leaked in the REST API!)

we should make sure that Users that have marked themselves as private do not leak these data points.

Important: We also need to make sure we understand the impact to any frontend component that already uses these data points.