Skip to content

Update documentation regarding private profiles

ben requested to merge b3n4kh/gitlab:b3n4kh-master-patch-68250 into master

What does this MR do and why?

Update documentation to fix unclear and misleading information about private profiles. Setting are profile to private does hide information from REST and GraphQL APIs in certain scenarios. Whereas the documentation suggests otherwise.

Screenshots or screen recordings

How to set up and validate locally

An example of hidden information via the REST API:

  1. Set user Profile to Private as described under https://docs.gitlab.com/ee/user/profile/#make-your-user-profile-page-private
  2. Get list of User projects via API for uid 1 : 
    http "https://gitlab.com/api/v4/users/1/projects"
  3. An empty list of is returned by the API
  4. Set the user Profile to Public again, and repeat step 2 to get list of projects.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Russell Dickenson

Merge request reports