Allura user profile pages list projects that do not have *anonymous read access. We should fix that to use the current logged in user's permission. That is, a user could see their own 'private' project, but *anonymous could not.
Fix is on allura js/2235. To test, create a private project and make sure it shows up on the user's profile page (like /u/username/profile). Log in as a different user and view the previous user's profile. The private project should not be listed.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Fix is on allura js/2235. To test, create a private project and make sure it shows up on the user's profile page (like /u/username/profile). Log in as a different user and view the previous user's profile. The private project should not be listed.
assigned_to: Tim Van Steenburgh --> Rick Copéland
status: code-review --> closed
Looks good. merged and closed.