Question Userlist is public?

ok, a follow up to the userlist issue,

so if I turn-off the "user-statics" within config plug-ins, which also turned off the userlist - which was available to everyone, guests and all, who visited the site.

(For a work-a-round, I set an external link to get to userlist and set that menu item as registered.)

Or what am I doing wrong?
_Cindy

Yes, I recently discovered this "secuity loophole" - as one might describe it - with K 1.6 and the user list. As you will see here at www.kunena.com , if you are not logged-in you can view the user list. This is the reference to our earlier discussion on the subject: www.kunena.com/forum/159-k-16-common-questions/67363-user-list

Perhaps this is not a good idea and it might be better if the availability of the list was confined to only logged-id, registered users. Other extensions make this possible (e.g. JomSocial and Community Builder).

As you say, you can develop some workarounds to hide certain information from appearing but it does not seem like an ideal solution. What would be ideal is if the user list feature had its own control mechanisms. Let's see if the development team has some ideas on how to fix this properly.