Toggle profile globally

[Pytal]

Adds two new settings:

1. A config.php option 'profile.enabled' which defaults to true to enable/disable profile globally
2. A Profile section under Administration “Basic settings” to enable/disable profile by default for new users

Close #30866

Contributes to #28139

[jolly-jump]

Am I right, that this toggles globally, if profile pages are enabled or disabled and if they are disabled they can not be enabled by the individual user?

If this is the case, there is need for another issue: I'd like to have public profiles "opt-in" as the default setting.
Either because this is hardcoded (as is the "opt-out" feature at the moment), or preferably as a config-option.
I want to be able to set public profile pages to "not enabled by default" and let each user decide wether they want to go public or not.
One reason: the username is displayed in the URL, which (I believe) is not GDPR-compliant, if it is enabled by default and not sanctioned by extra privacy agreements.

[Pytal]

@jolly-jump in the current state of this PR, setting the option to disabled would disable profile completely and users would not be able to enable their own profile individually.

You've made a good suggestion so we will also add an admin option to set profile to enabled/disabled by default for all users and allow individual users to opt-in or opt-out.

[shieldwed]

For those searching for a quick fix to disable all users profiles for now:

update oc_accounts set data = JSON_SET(data, '$.profile_enabled', JSON_QUERY('{"value": "0", "scope": "v2-local", "verified": "0"}', '$'));

[kroerig]

Any idea when the feature will be ready to use? We use NC at our school und students must not be able to enable a public profile.

I applied the workaround from @shieldwed , but this only applies to existing users.

[szaimen]

maybe we should document this somewhere?

[szaimen]

And maybe it should be disabled by default?

[Pytal]

maybe we should document this somewhere?

Created a separate issue nextcloud/documentation#8122

[jancborchardt]

Just for the record from what we talked about in the chat:

• We are keeping Profile enabled by default
• Admins can easily disable it with this setting by default, with users still being able to override it
• New profile fields which are sensitive were a) introduced recently together with the visibility settings and b) not public by default, so if people don't want them to be visible, they didnt set them

[szaimen]

@Pytal can you please rebase? Then lets merge this, I'd say

[szaimen]

sry Chris but tests are still failing :/

[Pytal]

Looks unrelated but will rerun for safety

[Pytal]

🟢

[Pytal]

/backport to stable23

[backportbot-nextcloud]

The backport to stable23 failed. Please do this backport manually.

#31624