Unable to Restrict WebCenter Users from Updating Their User Profile Information (Doc ID 1354554.1)

Last updated on MAY 11, 2015

Applies to:

Oracle WebCenter Portal - Version 11.1.1.4.0 to 11.1.1.5.0 [Release 11g]
Information in this document applies to any platform.

Symptoms

Unable to restrict users in WebCenter from updating their User Profile information.
As an Administrator you should be able to restrict what user profile information the users can update.  The following is an example of updating the user's profile photo.  Note that similar steps can be taken to update other user profile information.


Steps To Reproduce:

  1. Sign-In to WebCenter Spaces as WebLogic user.
  2. Go to the Administration Page.
  3. Navigate to Configuration > Services
  4. Select the "People Connections" Service.
  5. Select the Profile Tab.
  6. Set the Profile Access as follows:

    • "Summary" Profile Section.

      Who can view this section: Authenticated Users
      Allow Owner Override: Unchecked
      Can Edit: Checked

    • Profile Attributes - Edit Settings section.

      Profile Section: Summary
      Attribute: Photo
      Allow Update - Unchecked
  7. Click Apply.
  8. Register a new user with WebCenter Spaces.
    For example; tetsuser1
  9. Sign-In to WebCenter Spaces as a regular user.
    For example: testuser1.
  10. Navigate to "My Profile".
  11. Click on "Edit Profile".
    You can see the link "Change Photo" under the Photo in the user Profile.

    Click on that link and you will be able to update the user Profile Photo even when the privileges to do this have been removed.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms