Permissions issue in widget

Question

I have created a custom widget to enhance the user profile page to show some internal accounting info from an external source (SQL server). In the widget I have used the following to acquire the user that is being viewed: 
 #set($user = $core_v2_user.Current) 
 I then use the private email $user.PrivateEmail to call my external database. This widget is located on the user profile home page for all users. 
 This works fine except it only works for site administrators or if I give the Manage Membership role to my users. Otherwise $user returns null 
 Is there a way to call $core_v2_user.Current without this restriction? Anyone that is a registered user should be able to see it.

Patrick M. · Accepted Answer

$user.Curretn will only available to users with the ReadProfile permission, usually logged in users. user.PrivateEmail is only available to those whom have Manage Membership as this is considered private information. I would highly suggest using an alternative data point such as the username or the user.Id. They are equally as unique and you are not collecting private information in a secondary data source.

Permissions issue in widget

Top Replies