From a8b6ff20c1c9756181a91e0bff303eaea5706769 Mon Sep 17 00:00:00 2001
From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 7 May 2019 17:58:31 +0100
Subject: [PATCH] people: Do not show any personal information to users without
 status

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 src/templates/people/user.html | 106 +++++++++++++++++----------------
 1 file changed, 54 insertions(+), 52 deletions(-)

diff --git a/src/templates/people/user.html b/src/templates/people/user.html
index a1b5a3d1..45bddc26 100644
--- a/src/templates/people/user.html
+++ b/src/templates/people/user.html
@@ -13,68 +13,70 @@
 				</div>
 			</div>
 
-			<div class="row">
-				{% if account.address %}
-					<div class="col-md-6 mt-5">
-						<h6>{{ _("Postal Address") }}</h6>
+			{% if current_user == account or current_user.is_staff() %}
+				<div class="row">
+					{% if account.address %}
+						<div class="col-md-6 mt-5">
+							<h6>{{ _("Postal Address") }}</h6>
 
-						<address>
-							<strong>{{ account.name }}</strong>
-							<br>
-							{% for line in account.address %}
-								{{ line }}<br>
-							{% end %}
-						</address>
-					</div>
-				{% end %}
+							<address>
+								<strong>{{ account.name }}</strong>
+								<br>
+								{% for line in account.address %}
+									{{ line }}<br>
+								{% end %}
+							</address>
+						</div>
+					{% end %}
 
-				<div class="col-md-6 mt-5">
-					{% if account.phone_number or account.fax_number %}
-						<h6 class="mb-2">{{ _("Phone Numbers") }}</h6>
+					<div class="col-md-6 mt-5">
+						{% if account.phone_number or account.fax_number %}
+							<h6 class="mb-2">{{ _("Phone Numbers") }}</h6>
 
-						<ul class="list-unstyled">
-							{% if account.phone_number %}
-								<li>
-									<span class="fas fa-phone"></span>
+							<ul class="list-unstyled">
+								{% if account.phone_number %}
+									<li>
+										<span class="fas fa-phone"></span>
 
-									<a href="tel:{{ format_phone_number_to_e164(account.phone_number) }}">
-										{{ format_phone_number(account.phone_number) }}
-									</a>
-								</li>
-							{% end %}
+										<a href="tel:{{ format_phone_number_to_e164(account.phone_number) }}">
+											{{ format_phone_number(account.phone_number) }}
+										</a>
+									</li>
+								{% end %}
 
-							{% if account.fax_number %}
-								<li>
-									<span class="fas fa-fax"></span>
+								{% if account.fax_number %}
+									<li>
+										<span class="fas fa-fax"></span>
 
-									<a href="fax:{{ format_phone_number_to_e164(account.fax_number) }}">
-										{{ format_phone_number(account.fax_number) }}
-									</a>
-								</li>
-							{% end %}
-						</ul>
-					{% end %}
+										<a href="fax:{{ format_phone_number_to_e164(account.fax_number) }}">
+											{{ format_phone_number(account.fax_number) }}
+										</a>
+									</li>
+								{% end %}
+							</ul>
+						{% end %}
 
-					{% if account.phone_numbers %}
-						<h6 class="mb-2">{{ _("External Phone Numbers") }}</h6>
+						{% if account.phone_numbers %}
+							<h6 class="mb-2">{{ _("External Phone Numbers") }}</h6>
 
-						<ul class="list-unstyled">
-							{% for number in account.phone_numbers %}
-								<li>
-									{% if phonenumbers.number_type(number) == phonenumbers.PhoneNumberType.MOBILE %}
-										<span class="fas fa-mobile" title="{{ _("Mobile") }}"></span>
-									{% else %}
-										<span class="fas fa-phone"></span>
-									{% end %}
+							<ul class="list-unstyled">
+								{% for number in account.phone_numbers %}
+									<li>
+										{% if phonenumbers.number_type(number) == phonenumbers.PhoneNumberType.MOBILE %}
+											<span class="fas fa-mobile" title="{{ _("Mobile") }}"></span>
+										{% else %}
+											<span class="fas fa-phone"></span>
+										{% end %}
 
-									<a href="tel:{{ format_phone_number_to_e164(number) }}"
-										title="{{ format_phone_number_location(number) }}">{{ format_phone_number(number) }}</a>
-								</li>
-							{% end %}
-						</ul>
-					{% end %}
+										<a href="tel:{{ format_phone_number_to_e164(number) }}"
+											title="{{ format_phone_number_location(number) }}">{{ format_phone_number(number) }}</a>
+									</li>
+								{% end %}
+							</ul>
+						{% end %}
+					</div>
 				</div>
-			</div>
+			{% end %}
 		</div>
 	</div>
 {% end block %}
-- 
2.39.2