Patch by Mischa The Evil. git-svn-id: http://svn.redmine.org/redmine/trunk@21209 e93f8b46-1217-0410-a6f0-8f06a7374b81tags/5.0.0
@@ -33,7 +33,7 @@ class ActivitiesController < ApplicationController | |||
@date_from = @date_to - @days | |||
@with_subprojects = params[:with_subprojects].nil? ? Setting.display_subprojects_issues? : (params[:with_subprojects] == '1') | |||
if params[:user_id].present? | |||
@author = User.active.find(params[:user_id]) | |||
@author = User.visible.active.find(params[:user_id]) | |||
end | |||
@activity = Redmine::Activity::Fetcher.new(User.current, :project => @project, |
@@ -107,6 +107,18 @@ class ActivitiesControllerTest < Redmine::ControllerTest | |||
assert_response 404 | |||
end | |||
def test_user_index_with_non_visible_user_id_should_respond_404 | |||
Role.anonymous.update! :users_visibility => 'members_of_visible_projects' | |||
user = User.generate! | |||
@request.session[:user_id] = nil | |||
get :index, :params => { | |||
:user_id => user.id | |||
} | |||
assert_response 404 | |||
end | |||
def test_index_atom_feed | |||
get( | |||
:index, |