I got a PM today who is only in the registered users role who reports seeing the IP addresses below users avatars. I was under the impression only admins saw that. He said he just noticed this recently. Not sure if it was happenstance or not but he just created a group with a forum for said group and soon after he noticed the IP addresses being listed. Again not sure if that is just happenstance or connected.

Either case can anyone explain what the issue is?

Did you check the security permissions? Users with Modi Permissions can see IP address.

After some trial and error this is what seems to be happening; Those that create a group and thus by default a forum are getting mod access to said forum. Which is fine as it should be. However that mod 'access' is spanning the entire forum as it relates to seeing IP addresses.

For obvious reasons this is prob more a bug then a 'feature' and needs to be fixed.

What if you just change the template, and remove the IP address from the profile area. I think thats a smarter way, until your issue is resolved.

This is the intended behavior. As Adam mentioned, the best way to solve it would be to remove the [MODIPADDRESS] token from the PostInfo template in the AF control panel.

Hey Ben, what was the use-case that suggested that cross-group IP address visibility should be awarded to a moderator from one select group? Was it assumed that a moderator was likely a trusted source and thus "wht not?" or was it just that much easier for filtering etc? thanks, drew..

I honestly do not like that the group owners get to see user's IP address. It is a different thing that the website owner/admin/moderator gets to see it but a user  getting to see other users IP address is wrong. I does not matter to me that that user created a group on my website. If I like that user so much I will make him the moderator.

I think this is a serious breach of privacy. ( but I doubt that this will ever get fixed since this module is free. maybe I have hire someone to do this stuff now)

The solution to remove IP address token is not helpfule because then then real moderators do not get to see the IP address.

Posted By Ben on 28 Feb 2011 09:35 AM
This is the intended behavior. As Adam mentioned, the best way to solve it would be to remove the [MODIPADDRESS] token from the PostInfo template in the AF control panel.

Ben, indeed seeing the IP addy in THEIR group forums is fine, however module wide is a issue. And removing that token while 'fixing' the issue then removes it from the legit folks like admins/forum mods that should have that info.

Removing it from the templet is like cutting off my nose to spite my face. I shouldn't need to do that. I would like to suggest group forum mods either be removed from seeing the IP addy or limited to just their forum.