Disable users from changing user profile to private
Problem
Users can set their own profiles to private (https://docs.gitlab.com/ee/user/profile/#make-your-user-profile-page-private). As instance admins we want to restrict users from making their profile private.
Proposal
Solution could look very similar to https://docs.gitlab.com/ee/administration/settings/account_and_limit_settings.html#disable-user-profile-name-changes
Implementation Guide
Design
The setting should be checked by default meaning that, by default, people can make their profiles private.
Additional details:
- If the admin setting is unchecked, and people can't make their profiles private, the checkbox on the user profile > user settings page would appear, but it would be disabled and have a lock after it. Hovering over the lock icon would trigger a popover explaining why the setting is disabled.
- If the admin setting is unchecked and all profiles are thus required to being public, the setting above it ("Make new users' profiles private by default") would be disabled and have a lock icon after it. Hovering over the lock icon would trigger a popover explaining why the setting is disabled.
Here's how that would look:
| 1: User setting page | 2: Admin setting page |
|---|---|
 |
 |
The text for the popover on the lock icon on the user profile page should read:
Setting locked
Profiles are required to be public in this instance.
The text for the popover on the lock icon on the admin setting page should read:
Setting locked
The option to make profiles private has been disabled. Profiles are required to be public in this instance, and cannot be set to private by default. Learn more.
Learn more should link to: https://docs.gitlab.com/ee/administration/settings/account_and_limit_settings.html#set-profiles-of-new-users-to-private-by-default
Docs updates
As part of this change, we should update the following docs pages: https://docs.gitlab.com/ee/user/profile/#make-your-user-profile-page-private and https://docs.gitlab.com/ee/administration/settings/account_and_limit_settings.html#set-profiles-of-new-users-to-private-by-default. More details here.