Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document data privacy implications when using Views caching #62

Open
jensschuppe opened this issue Nov 3, 2022 · 1 comment
Open

Document data privacy implications when using Views caching #62

jensschuppe opened this issue Nov 3, 2022 · 1 comment

Comments

@jensschuppe
Copy link
Collaborator

When creating a View with a CiviMRF Views Dataset as a data source, the View should be configured to not be cached at all (i.e. changing the default configuration, which is tag-based).

This should definitely be part of the documentation, as leaving the caching on will cause the view be cached the first time it is built after clearing caches and does not update at all. This is important to know since CiviCRM data being fetched via the API can very likely be personal things (as in a "My data" or "My events" views) and will cause information disclosure to other users.

@jensschuppe jensschuppe added this to the 2.0.0 milestone Nov 3, 2022
@kainuk kainuk modified the milestones: 2.0.0, 2.1.0 Nov 10, 2022
@kainuk
Copy link

kainuk commented Nov 10, 2022

Hi @jensschuppe, I moved the milestone to 2.1.0. Erik Brouwer has tested the removal of the view updates, so I am going to create the long awaited 2.0.0 release. I think this issue makes sense, but should be part of a general update of the documentation. (Although often when a 0.0. release is made the 0.1 release follows soon)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants